We use doPrivileged with restricted AccessControlContext in several places. It's repetitive code where we need to create a permission array, then a permission collection, then the access control context object. Having an easy to use convenience factory for this functionality would allow us to more robustly create these with less possibility for error and to more easily use the more efficient doPrivileged(PrivilegedAction, AccessControlContext) method instead of doPrivileged(PrivilegedAction, AccessControlContext, Permission...)