code: func (roles Roles) Check() (err error) {
  	for _, role := range roles {
  		if err = role.Check(); err != nil {
  			return trace.Wrap(err)
  		}
  	}
  	return nil
  }
docs: // Check returns an error if the role set is incorrect (contains unknown roles)