How to set JDG authentication/authorization if the server run inside of a container like OpenShift with xpaas?

Issue

• We need to run JDG with authentication and authorization within OpenShift, how can we set the JDG configuration accordingly?
• We try to use protostream for remote query but this fail with the following message

org.infinispan.server.hotrod.RequestParsingException: Remote requests are allowed to protected caches only over loopback or if authorization is enabled. Do no send remote requests to cache '___protobuf_metadata'

• The environment setting CONTAINER_SECURITY_IDENTITY_ROLE_MAPPER does not have any affect, how can I set the RoleMapper?
• If CONTAINER_SECURITY_ROLE_MAPPER_CLASS is set the JDG instance failed with an invalid XML if the container is started, what is wrong in this case?