Currently, the <permission> element of <security-setting> only supports a space (i.e. ' ') as a delimiter for roles. Please support comma (i.e. ',') as well.