Question: How can a JACC provider use the Principal-to-role mapping facilities of the server it's deployed on?