Clarify that access key can hold an array of roles to OR match