small cleanup: resolve the role specification if it is an alias, and print out role IDs when restarting (just to be safe)