Make LoginAs a low level service that uses descriptors

As bulk service and computations need to login as a given user, the LoginAs should be contributed at a lower level than currently done.

We should also take the opportunity to implement it as a extensible service using descriptors.