Properly implement protection role synchronization. Removed roles will now be removed, and queries will not be wasted on roles that have not changed.