sasl: use impersonate:class: namespace instead of impersonate: namespace for specific roles