Google Provisioner needs an explicit NONE role type

Currently the Google role calculation uses null as an indicator to not assign the user to the Google group, but that is not working well as null represents other things as well (like deletes).