I'm wondering if isGranted should not simply accept an array of roles, and let ZfcRbac encapsulate it into an array if needed. This would make this lower level library more stricter about it's API.