[Exist-development] util:system-property() should run under dba

[James F. <jam...@ex...>]

considering java properties are exposed from util:system-property, its
probably a security risk to let guest user run

e.g.

util:system-property("exist.home")

will reveal path information for example

thoughts ? Note I think we need to have a general activity or way of
defining rights for functions/modules and probably need to review at
some point.

James Fuller