#851: Authentication security. JVM system properties *always* take precedence. Also allow to coonfigure the role classes. Polished code.