Delegating role discovery to UserDetailsService