Corteza defines three particular role types which need to be registered in the
RBAC_BYPASS_ROLES; defaults to
super-admin. Bypass roles may not appear in any of the other lists.
RBAC_AUTHENTICATED_ROLES; defaults to
authenticated. Authenticated roles may not appear in any of the other lists.
RBAC_ANONYMOUS_ROLES; defaults to
.env variables accept a space-delimited list of role handles.