Model: Detect role change

See https://www.drupal.org/project/eca/issues/3303025