Which class allows checks against the active principal using the language constructs defined for the declarative and imperative security actions?