Add a role to the AllowList precompile that enables someone to add/remove addresses from the AllowList but not affect Admins. This is more compatible with a hot("manager")/cold("admin") setup most partners use.