Unnecessary flow exposure

When flows specify allowed roles they are accessible through the server API. This can be a potential security risk. A flow that is not used from navigation, a page, a nanoflow or a published service has no reason to specify a role. Please remove the role or mark the flow as used.