Problem/Motivation
I saw http://cgit.drupalcode.org/drupal/commit/?id=c732355412b84a6f7079d92b402... for SA-CORE-2017-003.
But I noticed that the changes to FileAccessControlHandler::checkAccess() were missing the appropriate cacheability metadata.