remove consume_role as public api

you should just be able to call add_role and then FINALIZE instead, or
use mop::util::apply_all_roles
no need to do this if we have no roles
role composition changes break this