#21 should default purge.roles.limit to max