do not yield false ip values from callable rolesdefs