Role-based access control (RBAC) in Java via proxy objects using annotations