I guess what I was hinting at was the difficulty in filtering "remote" roles