Corrected bad test: we have to remove old local roles even if the new state config is empty