Refactor tokumx

Don't know if we should use another namespace than `role:` here?