fixes #5540 - also clone builtin roles during migration

Another for you @ares.  Reproducer: http://projects.theforeman.org/issues/5540

I can't see a reason *not* to clone them, but happy to be corrected.  Without cloning builtins, we miss new roles for filters the user might have had against the builtin roles.