param: use lp_is_security_and_server_role_valid()