$user->PrincipalObj is _undef_ if the LoadByEmail failed

This prevents runtime errors when assigning unknown users as
single-member roles
loc() is only in scope by way of $self->
Merge branch '4.2/single-role-group-resolve' into 4.2-trunk