incorporate John Gaspers hook to assign admin read privilege based on attribute

Have an attribute on folder that will assign READ to a readonly admin group. This attribute cant be removed unless the group is deleted. Cache the attribute assignments for an hour and clear the cache if there is an attribute assignment or removal in this jvm.