Referential integrity checking on role names

Currently there is nothing stopping you from having a default-role or a principal mapped role in the geronimo security descriptor that is not present in the roles listed in the j2ee deployment descriptors. I think it would be useful to check on this and at least print a loud warning, or throw a deployment exception.