Roles

Each capture runs as Open, then once per role with its test sign-in. Passwords are sealed: nobody can read them back.