api.user.get_roles(): add the option to ignore inherited roles