protected function addReachableRoles(TokenInterface $token, array $sids)
    {
        foreach ($this->roleHierarchy->getReachableRoles($token->getRoles()) as $role) {
            $sids[] = RoleSecurityIdentity::fromAccount(RoleUtil::formatName($role));
        }

        return $sids;
    }