Looks fine to me.
is "@PersistenceRolesAllowed" a bit or a mouthfull?
This sounds great - too bad it isn't part of the spec ;-)
But, as MS loves to say: there's always *.1 ;-)
It will be if we show that it is feasible. We almost *did* have this in the spec, but we ran out of time.