Strange things with non-auth roles and role inheritance