Disallow removing roles from permanent users