Am I correct that there is no way (whether via RESTlets, Web Services, etc.) to programmatically create or update a role?