Consider Servlet sub interface of AuthorizationManagerFactory

[rwinch]

It might be nice to have a sub interface of AuthorizationManagerFactory that adds support for things like hasIpAddress and access. The generic type of RequestAuthorizationContext would likely be defined as well.