POSIX compliant regex
Env support
Read roles from env