Revert "Remove RequireMetaData implementation in role."

Also changed the implementation to use a "prohibited" attribute instead
of the "optional" attribute to fit the use case better.

This reverts commit 44bbb0a230ad65dc43cff2dc19bad6a5fa78269b.

Reason for revert: b/210927507
Fixes: 210927507
Test: presubmit

Change-Id: If5ece48a78155be1853f49e36b60e00045eb945e
8 files changed