Pull in security role from upstream.