[security] Duplicate role name validation