Can the `resolveImplicitRole` + `hasAnyRole` calls here be rolled up into a `resolveExplicitRole` call?