CM override framework's roles hierarchy by adding security.properties