ISPN-4669 Load additional realm roles only for realm principal