RoleContributors are invoked during permission checking allowing the roles
calculated from persisted assignment and inheritance to be altered
dynamically. Implementations must make every attempt to be as efficient as
possible or risk potentially dramatic performance degradation.