its still in the pe_compiler and pe_master groups because it matches the following rule: trusted.extensions.pp_auth_role = pe_compiler