LdapExtLoginModule is missing the first role group of a nested structure

When traversing through a hiearchical role structure, the first matching context does not have its role name added to the resulting subject roles.