Set manager_bypass to False, remove guard-role for Manager for mark-as-done, validate and refuse transitions