Roles/procedures: support "with grant option" permissions. Part of issue #16