make role checkboxes react to authenticated user

would be nice if the permission checkboxes behaved the same as core: selecting something for 'authenticated user' marks them for all other roles.

Depends on #1525242: Allow using standard permissions table for flags.