So, my current conception, and it's just a conception at this point, goes like this.
There is a cohort and some users, who may or may not have various roles in that cohort. The cohort has a single tree in it.
The childrenFor() first goes through the cohort to collect all children of the node being asked for, then filters that list through the user. The user's role and their current progress is used in the filter.