Add the ability to configure service_token_roles. Change-Id: Ie0063e26fe088fdd483a66ab5a7a0b2f240a2434