PinCodeSecurityOptions.RolesWithoutPin has no effect

[janmuncinsky]

This setting is ignored by the system. I guess this is because the user authorization is now handled in the PagePreviewPartialRouter, which is called during endpoint resolution in the EndpointRoutingMiddleware, and if the recommended order of middlewares is configured, the user is not authenticated in this stage yet.
Wouldn't be a better idea to register a new Authorization handler? This way authorization would be handled from AuthorizationMidleware, where it belongs and the issue with RolesWithoutPin could be solved.