Allow single strings in roleHierarchy configuration