Filter requests based on IDM user roles.

Only allows request for services matching user role. User services are part of the role, and the way are extracted can be configured (see `config.idm_role_regexp`)