r11536: Add a hook for client-principal access control to hdb-ldb, re-using