code: func NewRoleSet(roles ...Role) RoleSet {
  	// unauthenticated Nop role should not have any privileges
  	// by default, otherwise it is too permissive
  	if len(roles) == 1 && roles[0].GetName() == string(teleport.RoleNop) {
  		return roles
  	}
  	return append(roles, NewImplicitRole())
  }
docs: // NewRoleSet returns new RoleSet based on the roles