[xacml] Combinators

The three combinators are attached, which is exactly the text we had at
the meeting.

PermitOverrides
DenyOverrides
FirstApplicable

Sorry, I thought I had sent them yesterday morning.

Cheers,
-Polar