macro_rules! freeze_roles {
    {$($role:ident => $rule:expr;)*} => { ... };
}