[WFLY-490] [WFLY-2026] Allow server group scoped roles to access fully-contained host-level resources