See https://git.eliatra.com/eliatra-suite/eliatra-opensearch-plugin/-/blob/main/security-core/src/main/java/com/eliatra/suite/securityplus/authc/LoginPrivileges.java#L42