Roles / Timelocks

Guardian: only for operations that protect the contracts
Pauser: 

Granular roles