Fix typo security-rol-ref to security-role-ref