ensure default roles and permissions at startup, they're not worth alembic revisions.