Example module for advanced, in-code shib_auth role attribution