IsInRole and IsNotInRole should check for null principal/identity

[rockfordlhotka]

Is your feature request related to a problem? Please describe.
It is possible (in a .NET Core console app anyway) for the current principal/identity to be null. In this case the IsInRole and IsNotInRole rules throw a null reference exception instead of a security exception.

Describe the solution you'd like
I think the expected behavior is for these rules to throw security exceptions if the principal/identity is null, since the user is clearly not in the required role.

Or actually I suppose IsNotInRole should return true (no exception) because the null user is clearly not in the specified (any) role.

[github-actions]

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.