Hack to force Glassfish to map groups to roles.  Didn't feel like trying to figure out how to model and implement a 'resource' for that, so just jammed it into Realm creation.