For example imagine there is a role lettervandedag_overheid for client lettervandedag, which is meant for admins of that service.
In testing one would want to use another clientid than the one in production, but as there isn't another zauth instance used, the users and roles are the same. Because it's another client, the role doesn't work.