one minor change - Both RUNTIMEURL and RUNTIMEOVERRIDEURL values are set in the service definition for this role...

otherwise, looks good