Don't look up role if cached.
Fix #22: show which applications are actionable.