roles supported in KeyRing instantiation