Disallow managing roles with greater privileges

www.agileplannerapp.com/boards/173808/cards/5254

* Only allow superadmins to view and manage other superadmins
* 'Filter by Role' only shows roles that current user can manage
I think there's a missing `assert` here (and the method name might be better as `assert_role_not_present`).