hide 'system' roles by default