fixing #3094 (security: make PermissionEvaluator and/or methods available via Applica...