minor tweaks

we do want to allow role "null" to have some privileges, that is to let
bot operators give everyone some permissions if they want to