MDL-59429 roles: Log add/remove admin users.