Yup that's where all the sweet role action takes place. All one would have to is make use of workflow-NG's hooks to implement a new event where a role was added/removed/renewed/deleted. I'd do it, but I'm trying to focus on one project at a time.