almost completed role reachability analysis - still need to duplicate
flows