Tightened selector on UserRole creation to only target Program* roles