[api] roles must be defined for Cloudant
[fix] syntax cleanup
sqash roles
[tool] iced-runtime; Cakefile
[doc] _security docs and installation how-to