SU - add superuser checks for create/alter role with grant attribute.