env.adopt user

I took the next item off the roadmap and implemented it. Comments attached to the implementation are fortunately less arduous this time - AccessControl has much better support for this use case than adopt_roles! ☺