fix PVE::AccessControl::role_is_special