Currentlly it's necessary for enable to explicitly be called when defining roles with the AuthorizationConfigurationBuilder, instead it should be automatically enabled when one or more roles are defined. disable can be called if a user only wants to define roles.