part 2 of preliminary solution to #4053 (Transient field User.authorities not refresh...