Require a role for all api operations.