Why does Siteminder webagent for IIS7 require the CGI role to be added (as documented)?