[security] Fix duplicates on the role list after an add operation