Roles are now pre-loaded and those required for certification agree with the server-side implementation