[WFLY-1943] Allow the RunAs role mapping capability even where real role mapping is enabled.

In this case only users with the SuperUser role can request a mapping and even then the roles requested MUST exist.