code: public static void addOperation(final OperationContext context) {
          RbacSanityCheckOperation added = context.getAttachment(KEY);
          if (added == null) {
              // TODO support managed domain
              if (!context.isNormalServer()) return;
              context.addStep(createOperation(), INSTANCE, Stage.MODEL);
              context.attach(KEY, INSTANCE);
          }
      }
docs: Add the operation at the end of Stage MODEL if this operation has not already been registered.
  
  This operation should be added if any of the following occur: -
  - The authorization configuration is removed from a security realm.
  - The rbac provider is changed to rbac.
  - A role is removed.
  - An include is removed from a role.
  - A management interface is removed.
  
  Note: This list only includes actions that could invalidate the configuration, actions that would not invalidate the
  configuration do not need this operation registering. e.g. Adding a role, if the configuration was already valid this
  could not invalidate it.
  
  @param context - The OperationContext to use to register the step.