Use regex to match roles.

Made it match ever role ending with "submitter", according to the given XACML policy.