Whoops, insure IDs are encoded correctly in raxRolesMask.