Use the "wrapped" owner when testing context inside proxy roles.

Therfore, move check of user's roles to end, since  proxy roles make the user's
roles irrelevant.  This also simplifies the C version, as well, since we don't
need to worry about setting the result back to NULL if we haven't assigned it
when an error occurs.

Incorporate comments from the C version (so that correspondence is clearer).