If authnetication is delegated to the container it would be nice if the roles
that have been assigned to the user could be considered as groups in the matrix
based authentication.