macro_rules! internal_add_role {
    ($roles:ident, $role:ident => updatable_by: [$($updaters:ident),*]) => { ... };
}