HTML doesn't work without ACCOUNT_ROLE_ALLOWCODE, so don't offer it
as an option.