Non-existent api_users are now skipped correctly when setting up roles and groups.