MDL-43619 Roles: reset_role_capabilities function destroys overrides