Fix #1228: RbacSecurityUser doesn't handle users without roles properly