add test for ignoretenantrole in auth-z support new config