How often do the files in cache/rs/ get "updated" in a normal environment? Every time the blog is accessed? Every time the plugin is accessed in the dashboard?
I use a File Monitor and am receiving daily notifications that these cache files are being modified. I am the only person that can assign roles and am not changing any settings or even accessing the role scoper plugin.
Just on the look out for hacking attempts as we have been victims in the past.