Make user ability checking work with foreign roles.