docs: public void addUnderlyingPermission(String permissionName, ManagementPermission underlyingPermission) {
          assert underlyingPermission.getActionEffect() == getActionEffect() : "incompatible ActionEffect";
          if (combinationPolicy == CombinationPolicy.REJECTING && underlyingPermissions.size() > 0) {
              throw ControllerLogger.ROOT_LOGGER.illegalMultipleRoles();
          }
          underlyingPermissions.put(permissionName, underlyingPermission);
      }