You can just get in the case where someone is pseudo-banned by having their roles removed and then they are allowed back in to the other site as a regular member. jsConnect has a setting that determines whether roles are synced so I really think no roles should be an empty string rather than a key not existing.