pull in rbac code adapted from https://github.com/racker/eom
formatting