Add full RBAC-based role separation base pieces.

* Build option support
* Initial rbacsep constraints
* RBAC module for rbac exemption attributes.