Introduce a new rbac role to nodemap, named projid_set, which allows setting or clearing project ID on files and directories when present.