when the plugin sets our access roles, we should use the compile.for.runtime event (added with cds 8.6.0) instead of loaded. https://cap.cloud.sap/docs/node.js/cds-compile#compile-for-runtime