Add search_extra configuration option, which allows one to scope role searches to the results of a specific query