Add data_recorder role, with optional GnuPG encryption.