Issue #3439953 by jaapjan, eelkeblok: Use allow list for roles and add options for password and email domain