[NEXUS-5478] Handle HTML entities in role and privilege IDs

I'm on the fence whether this change needs an IT. It's only "transport configuration" after all.