code: private Map<String, RoleSet> updateMapForSpecialSubject(String appName,
                                                              Map<String, RoleSet> specialSubjectToRolesMap,
                                                              String specialSubjectName) {
          RoleSet computedRoles = RoleSet.EMPTY_ROLESET;
          Set<String> rolesForSubject = new HashSet<String>();
  
          //TODO what if the appName is not present in the map?
          for (SecurityRole role : resourceToAuthzInfoMap.get(appName).securityRoles) {
              String roleName = role.getName();
  
              for (SpecialSubject specialSubject : role.getSpecialSubjects()) {
                  String specialSubjectNameFromRole = specialSubject.getType().toString();
                  if (specialSubjectName.equals(specialSubjectNameFromRole)) {
                      rolesForSubject.add(roleName);
                  }
              }
          }
  
          if (!rolesForSubject.isEmpty()) {
              computedRoles = new RoleSet(rolesForSubject);
          }
  
          specialSubjectToRolesMap.put(specialSubjectName, computedRoles);
  
          if (TraceComponent.isAnyTracingEnabled() && tc.isDebugEnabled()) {
              Tr.debug(tc, "Added the following subject to role mapping for application: " + appName + ".",
                       specialSubjectName, computedRoles);
          }
  
          return specialSubjectToRolesMap;
      }
docs: Parse the security-role entries to look for the specified special
  subject, and update the subject-to-roles mapping with the result.
  If the special subject was not found, an empty list is added to
  the subject-to-roles map. Otherwise, the list contains the set of
  roles mapped to the special subject.
  
  @param appName the name of the application, this is the key used when
  updating the subject-to-role map
  @param specialSubjectToRolesMap the subject-to-role mapping,
  key: appName, value: list of roles (possibly empty)
  @param specialSubjectName the string representing the special subject
  to look for. It can be one of these values:
  EVERYONE
  ALL_AUTHENTICATED_USERS
  ALL_AUTHENTICATED_IN_TRUSTED_REALMS
  @param secRoles the security-role entries, previously read either
  from server.xml or ibm-application.bnd.xmi/xml
  @return the updated subject-to-roles map