Enforce hostgroup/role uniqueness on User relation