Using role_objects instead of roles, as it seems more canonical