Fix #1690 "Comma-separated roles fail in persistence layer"