The rbac plugin throws a 500 error when client roles are enabled but no client role is present in the token.