Introduce roles and nostrum. Needs work to change from single-role users to multi-role users