add security=writeronly content explaining role-based access control