because the RoleList interface extends the GroupList interface, when doing subject.getPrincipals(GroupList.class) you might get the list of roles instead of the groups.
This prevents, for instance, getting the workflow items assigned to an ldap-user's groups.