IGroupController, IPackageController both have authz_add_role(), authz_remove_role() methods but I cannot see where they are used except in a couple of tests anybody know the story and can I just remove them?