Synchonous eventlistener on "beforeDocumentSecurityModification" should be able to alter ACP

Inside the CoreSession an event is fired before ACP update.

The new ACP is sent inside the Event context, but the listener can not alter the ACP since this is actually a clone of the source ACP.

To make this consistent with other "before" listeners, we should remove the clone so that Listener can act for real.