One of my clients hit a strange limitation - apparently you cannot inherit CREATE ROLE privilege. First, let's test if it's really true: