Clear controllers should only run on the app role