More config, this time roles
Lots of config refactoring to allow for scope-limited aliases