Original comment by @jaymode:
The security code base still contains parsing code and support for the old 2x role format that we've deprecated. We should remove this for 7.0 since it is too late to remove it for 6.0. Some of this code exists in the FileRolesStore and the RoleDescriptor classes.