add isAssignable to RestletUtilRole to ensure that system assigned rules
can be differentiated from assignable roles