Prevent role escalation