macro_rules! roles2 {
    ( ) => { ... };
    ( $($role:expr => $rule:expr $(, $updatable:ident)?;)* ) => { ... };
}