Recovery mode on a server with no roles now leaves a note, and the first normal start seeds the built-in roles, the default Authentication and the new-install privacy defaults when there are no roles or the note is there, then clears it. A role made in recovery mode no longer leaves every account without permissions. Servers that have started normally before have roles and no note, and are unchanged. Fixes #265