Access multiple check is inefficient

This is related to #322034: Have a $flag->access() method, which I discovered while working on #285237: Ability to disallow a flag/unflag operation. It looks like we're calling hook_flag_access_multiple() once for *every* piece of content being checked, rather than calling it once and merging in Flag's default checking. This patch corrects this extremely inefficient behavior.