[security] Support adding new privileges to existing Sentry roles