title: How to require multiple roles/authorities
body: <p>As far as I can tell only <em>any of</em> lists are available in <code>@Secured</code> annotations or <code>ExpressionUrlAuthorizationConfigurer</code> objects. Trying to add multiple annotations or <code>hasAuthority()</code> calls either fails to compile or only the latest one is used.</p>
  
  <p>How can I define that a particular request (set of requests matching a pattern), or method requires <em>all of</em> a list of roles/authorities?</p>