[WFLY-1599] Add support for mgmt-groups.properties, at the same time ensure groups and not roles are referenced.
WFLY-1632 Cannot deploy distributable application when is defined jdbc-store for web session
[WFLY-1635] Add a new map-groups-to-roles attribute to allow users to configure if there is a 1:1 mapping between the two.

If set to false (The new default) then no mapping occurs and at the time of authorization mapping is expected to occur dynamically.
[WFLY-1635] Minor changes to map-groups-to-roles model handling from review comments.
[WFLY-1635] Switch the default map-groups-to-roles to true i.e. the existing default behaviour.

The ManagementRealm definitions with <authorization /> definitions then have this set to false.
Make addServerExecutorDependency more builder-friendly
[WFLY-490] Basic permission and constraint classes
[WFLY-490] Rename ContraintDefinition to AccessConstraintDefinition
[WFLY-490] Use Authorizer in OperationContextImpl
[WFLY-490] Get basic perm checks working
[WFLY-490] Help ensure process lifecycle ops require write-runtime perms
[WFLY-490] Fix constraints; annotate a couple things as sensitive
[WFLY-490] Temp hack for reading operation-headers from HTTP GET
[WFLY-490] Add AccessConstraintDefinitions to attribute and operation definition and builders
[WFLY-490] Configure the sensitivity constraints, vault expressions sensitivity and application types
[WFLY-490] Basic filtered read-resource support
[WFLY-490] Don't expose addresses via wildcard requests
[WFLY-490] Better read attribute enforcement
[WFLY-490] Fix resource filtering reporting with recursive reads
[WFLY-490] write-attribute enforcement