CertificateRoleConfig: {
    filterSharedWith?: ((personId: SHA256IdHash<Person>) => boolean);
    propagateInstanceToEveryone?: boolean;
    roleGroupName?: string;
    trusted?: boolean | ((personId: SHA256IdHash<Person>) => boolean);
}

The config for the CertificateRoleModel.