CMS-4489 User Manager - Move roles out of system userstore.
Changed PrincipalKey format to type:userstore:id (or role:id)