Incomplete effort to fix roles
Better function name
Live with broken per-column privs for now
Don't follow update chain