let users choose only token role aware items (no folders). Validator + widget
i18n
