improve MySQL/MariaDB roles