SOAP fault on role mismatch, not 401