__roles__ attribute directly.  This further links the publisher to the
Zope application. :(

Perhsps in Zope 2.9, we can switch to using the Zope 3 publisher.