Don't throw exception for destroyed RoleUserState.

This is inherently racy upon user removal and thus we should just
ignore the persistence for destroyed states.

Also added missing synchronization for getHeldRoles().

Fixes: 138776514
Test: presubmit
Change-Id: I3f67d48377b43181a844c612cb39ce85017cd8d3