RBAC: Configurable 'recursion" attribute for creation of security contexts