Move pksa_role_free() define to public header