simplify PasswordField a bit
use keyID rather than security level
Roles::Content -> Roles::Data
new Roles::Content for content items