private HashSet<Role> allRoles(SecurityConfig security) { return new HashSet<Role>(security.getRoles()); }