Use a simplified RBAC model. Closes #25