PUBAPI-961: make sure role default members are always role members.