Hide the AuditorReader role  in the system role assignment modal by
placing it in an "implied" scope.