Which two are true about roles? (Choose two.)
A. A secure application role can be set only by its associated PL/SQL package.
B. A role can be granted a combination of system and object privileges and other roles.
C. Roles are owned by SYSTEM.
D. The CONNECT role is granted automatically to a user when it is created.
E. The RESOURCE role is granted the CREATE SESSION privilege.