continued improvements to the base roles and iptables handling