Looking at the AccessController, I see all but one method is native (and the one that isn't, calls a native method). What I want to know is - every time the AccessController is called, does it consult the Policy? Or does it only consult the Policy once? Is this behavior guaranteed in the specs?