# RBAC assets (hash before publish)