simplify usage of authorizableiterator

the code concatenating iterators in AuthorizableImpl and GroupImpl should be simplified in those cases where one of 2 iterators is known to be empty.

reschke, fyi. this second subtask to further limit the guava related fix to the bare minimum.