BZ-1117041: now WAS uses ROLES instead of groups (defined explicitly on web.xml) and AppSetup provides a list of enforcement roles.