identity.pp: Allow use of multiple admin_roles

Use of admin_roles was limited to only admin, now it can
take an array of admin roles.