tough: consider centralizing role name sanitization

[webern]

In 1809b9b we added a struct TargetName to centralize the sanitization of target names. A similar struct, e.g. RoleName, was considered but found to be a bit more complicated. We should consider creating a similar centralization of role name sanitization with something like a struct or trait for role names.