there is really no good reason to build them on-demand also, this way, if the schema itself is invalid, we get the error thrown at startup, not the first time we try to use one of the role endpoints