Move role protection configuration out of strongarm