roles

this way we can create intermediate levels that would be defined by user,
before it was not possible to create lower role than trusted which isn't
very nice