Role resolution errors (aka "user does not exist") should be fatal