Fixes #938, effective roles env var

This PR fixes #938 by adding ``effective_roles`` env var which contains the roles used for the currently executing command.