[IOT-3260] Delete roles at the TLS disconnect