OperatorRole
Who the operators are: it steps aside when CoSec decides (its policies of the actions); otherwise the operator role decides: a caller with the role OpsRoles.OPERATOR may act on an entry and send the framework's system commands, and no other caller may.