add roles key; closes #70