Remove user and employee from rule context and cache
This gives more chances to hit the cache as there is less sets of groups than users. Also to remove some core rules (which should never be customized), this provide a simpler API for the clients.
Closes #12581 (closed)