removed chef-client role