Currently the management RBAC is applied from the file config parser, directly to some internal components, it dos not go through ConfigurationImpl, so it is not configurable via properties. 

In order to avoid xml manipulation, we should be able to do the required control plane RBAC via a properties file.

In essence we want to be able to lock RBAC down to read only views for a handful of roles but have RBAC in place at all times for the jolokia agent.