EJBComponent may throw NPE in certain conditions from checkCallerSecurityIdentityRole

If there is custom role mapping set up in elytron and it does not handle it properly 'roles' might end up null: https://github.com/wildfly/wildfly/blob/master/ejb3/src/main/java/org/jboss/as/ejb3/component/EJBComponent.java#L628