presto-main/src/main/java/io/prestosql/security/AccessControl.java/AccessControl/checkCanGrantRoles
class AccessControl:    void checkCanGrantRoles(SecurityContext context, Set<String> roles, Set<PrestoPrincipal> grantees, boolean withAdminOption, Optional<PrestoPrincipal> grantor, String catalogName);