creds.add(new PrincipalCredential(role, false));
creds.add(new PrincipalCredential(childGroup, true));
creds.add(new PrincipalCredential(parentGroup, false));
Subject childSubject = new Subject();
childSubject.getPrincipals().add(new UserPrincipal("childUser"));
creds.add(new SubjectCredential(childSubject));
return creds;
}