CLOUD-154 default value is the old one so previously created roles will stay usable