security-role support?

[Thom Park]

Tomcat 3.2 production doesn't seem to support this construct in web.xml.

It loads it but does nothing with it - is this correct?
Is there a fix for this in the offing or is support for this going to
appear in Tomcat 4.x

-Thom