Support role hierarchies

Suggested fix for issue #282.

This enables the use of ```security.role_hierarchy``` in the ```security.yml``` config.