NEXUS-5998: short-circuit LDAP role-search if none of the roles exist in LDAP