Should the role allow mount points as a source for a snapshot? The role could translate a mount point to a vg/lv. snapm takes mount points as input and does the translation for the user.