hardening user/group relations by adding role_type to relationships