should this be `del self.user._roles`?