Right now, you cannot configure PEF (policies, ACLs, roles) unless the license is on the master. If you have the PEF license on the master, you cannot have roles or ACLs on the local. If you turn on centralized licensing, your APs will be limited to the number of PEF licenses that you have.