When resolving a user's roles, if there are any roles that depend on DLS/FLS, and that is not permitted by the current license, we skip them.
https://github.com/elastic/elasticsearch/blob/f435488484ec844962d49371b8917c135fe6f714/x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security/authz/store/CompositeRolesStore.java#L188-L192

However, we do not perform any logging in this circumstance, and rely on the user discovering that their roles are missing.

We should
1. Add a `WARN` log message
2. Add a Warning header

when this occurs. 
x-pack/plugin/security/src/test/java/org/elasticsearch/xpack/security/authz/store/CompositeRolesStoreTests.java
return new Authentication(
            user,
            new RealmRef("authRealm", "test", "foo"),
            lookedUpBy,
            Version.CURRENT,
            randomFrom(AuthenticationType.REALM, AuthenticationType.TOKEN, AuthenticationType.INTERNAL, AuthenticationType.ANONYMOUS),
            Collections.emptyMap()
        );
    }
    public void testXPackSecurityUserCanAccessAnyIndex() {
        for (String action : Arrays.asList(GetAction.NAME, DeleteAction.NAME, SearchAction.NAME, IndexAction.NAME)) {
            Predicate<IndexAbstraction> predicate = getXPackSecurityRole().indices().allowedIndicesMatcher(action);
            IndexAbstraction index = mockIndexAbstraction(randomAlphaOfLengthBetween(3, 12));
            assertThat(predicate.test(index), Matchers.is(true));
            index = mockIndexAbstraction("." + randomAlphaOfLengthBetween(3, 12));
            assertThat(predicate.test(index), Matchers.is(true));
            index = mockIndexAbstraction(".security-" + randomIntBetween(1, 16));
            assertThat(predicate.test(index), Matchers.is(true));
        }
    }
    public void testXPackUserCanAccessNonRestrictedIndices() {
        for (String action : Arrays.asList(GetAction.NAME, DeleteAction.NAME, SearchAction.NAME, IndexAction.NAME)) {
            Predicate<IndexAbstraction> predicate = getXPackUserRole().indices().allowedIndicesMatcher(action);
            IndexAbstraction index = mockIndexAbstraction(randomAlphaOfLengthBetween(3, 12));
            if (false == TestRestrictedIndices.RESTRICTED_INDICES.isRestricted(index.getName())) {
                assertThat(predicate.test(index), Matchers.is(true));
            }
            index = mockIndexAbstraction("." + randomAlphaOfLengthBetween(3, 12));
            if (false == TestRestrictedIndices.RESTRICTED_INDICES.isRestricted(index.getName())) {
                assertThat(predicate.test(index), Matchers.is(true));