Is there a recommended way of keeping downstream cluster roles like

project-owner

in updated when adding new api resources to the cluster? Is manually updating them a potential issue later on?