Add support for mask_rax_roles_403 in validator