this wont work as expected because gshell_role_template is not called by a usersubject (instead gsession)