a name whose last word starts with role= was read back as the role: tarp pair <id> --name role=ops made the whole allow list unreadable, and "bob role=view" silently made bob a viewer.
such a name is now written with an explicit role after it, and add collapses whitespace in a name so a newline cannot split the line.