opsOperatorRole

Who the operators are: steps aside when CoSec decides (CoSecCommandAuthorizer, its policies alone, this one then having no objection); otherwise the operator role decides (OperatorRole).