Method setServletSecurity of ServletRegistration.Dynamic does not work

1. Create a simple servlet in web application:  public class AdminServlet extends HttpServlet {     private static final long serialVersionUID = 1L;     @Override     protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {         resp.getWriter().append("Admin resource");     } } 2. Create a web listener: @WebListener public class ContextListener implements ServletContextListener { @Override public void contextInitialized(ServletContextEvent sce) { ServletContext ctx = sce.getServletContext(); ctx.declareRoles("admin"); ServletRegistration.Dynamic admin = ctx.addServlet("admin", AdminServlet.class); admin.addMapping("/admin"); admin.setLoadOnStartup(1); admin.setServletSecurity(new ServletSecurityElement(new HttpConstraintElement(NONE, "admin"))); } } 3. Run application and call GET /admin resource