de10e08348
This commit clarifies the semantics of withRoles, which is to check the role-based authorities in an authentication. Closes gh-17843