Attempt to enforce role name uniqueness

One proposal for coping with naming conflicts between groups and users for purposes of granting permissions: don't allow conflicts (so far as we can determine).

When strong consistency comes to cluster metadata, we can enforce this more strongly, but for now we can supplement this by adding documentation instructing ops not to create groups and users by the same name.

/cc @Vagabond