Having a header check next to rax:roles seems to break MaskRaxRoles