change Task.for_role to Task.for_actor to reduce confusion since actors aren't restricted to auth roles. Also return 'unspecified' for unnamed tasks.