Matches callers holding any of roles.
roles
AuthStateRule.hasAnyRole(Set<String> roles) : this(requireAuthenticated: true, anyRoles: roles);