8.2
[Security] fix unserializing session payloads from v4
[Security] Make RoleHierarchy::getReachableRoleNames() return a list again