security: first pass at implementing RBAC

Signed-off-by: Pierre-Alexandre Meyer <pierre@mouraf.org>