if `rbac` is from config then `can` may be undefined there too

fix 5aed49a28f5b2ed2f263526381437ee5a5b734f2

Signed-off-by: Oleg Verych <olecom@gmail.com>