Fixes #5470: do not add root roles into ldap