fix: No longer create a new security manager in RoleManager.manage_getUserRolesAndPermissions
Move MUT import out of module scope.
Neaten changelog entry,