Split out shared "Access check" code from OM

The OM contains a lot of access check code that will need to be shared with the snapshot manager.  The intent of this ticket is to create a separate class for that code which can be shared by both.

This is a part of the access check work defined here:

https://issues.apache.org/jira/browse/HDDS-6851