/admin/set-role API allows setting non existent role values - Better Auth