while we are at cleaning up, i wonder if we should stop defaulting this role to anything, as there already is a default in the CreateBundle configuration. if we keep it, we should probably change it to ROLE_ADMIN, to reduce confusion. the bundle config default and the code default being different could confuse people reading the code.