Validator check to prevent duplicate role extensions, and corresponding
tests