pass=allowed
rolefail=willfail
somebody=allowed