add a "spectator" role which can't stream or download anything (fixes
#48)