Factor out sanitize_server_role.