fixes #5540 - also clone builtin roles during migration