Merge changes Ied06561c,Idff421e1,Iaf12bab5,I2b744f5a

* changes:
  Add permission_sort cache to remember sort orderings
  Reuse cached RefControl data in FunctionState
  Refactor how permissions are matched by ProjectControl, RefControl
  Cache effective capabilities to improve lookup performance