presto-spi/src/main/java/io/prestosql/spi/connector/ConnectorAccessControl.java/ConnectorAccessControl/checkCanCreateRole
class ConnectorAccessControl:    default void checkCanCreateRole(ConnectorSecurityContext context, String role, Optional<PrestoPrincipal> grantor)
    {
        denyCreateRole(role);
    }