security: delete roleassignment on object delete; clear FK in security audit