This is a major change. `CREATE ROLE` does not imply that the role can login.