Object Level security with multiple roles

I added a few new columns to an Employee table.  I only want a certain role "HR Administrators" to see those fields.  It seems simple at first.   All I need to do is set the Object Level Security on those fields to "Read" for the HR Administrators role and set it to "None" for the Main role.   However, if a user is assigned to multiple roles, reports throw this error for that user "The combination of active roles results in a dynamic security configuration that is currently not supported."   So basically the user can't be in one role where he has None for a field and another where he has "Read".    This also happens when I try it at the table-level.    This seems like a major shortcoming.  I haven't been able to make any worthwhile use of object-level security for this reason.    I simply want a main role where all users reside and cannot see HR data, and another role where users can be added for these additional fields.   Is there a way to achieve this without making sure that users only belong to one role?

Thanks in advance for your help!