I'm also thinking it should not be SUSE-only. Also, it's a bit weird to have these attributes only for deactivation, but never used on application of the roles.