Minor Description
AdvisoryBroker does not set up SecurityContext so advisory message not sent on startup. The AdvisoryBroker has a nowMasterBroker() method that sends an advisory message without a SecurityContext. If the authorization plugin is being used, then it fails because the user is not authenticated. It looks to me like the fix would be to add a line to that method:
context.setSecurityContext(SecurityContext.BROKER_SECURITY_CONTEXT);