A small change like this could lessen confusion for new users. I'd like to be careful with the term "role" since an important feature of Teleport is the ability to assign user roles from in an access-control content. I think the name of the teleport --roles flag is a bit misleading as they describe the different services or modes that the teleport binary can run.