You should still be able to authenticate to a user with an invalid role (could be important for future upgrade paths to a version with more, or user-defined, roles). We should just skip the invalid role and continue acquiring privileges for any other valid roles in that user's privilege document.