Support adding roles.

Currently adds roles one chef run at a time -- this is
nonoptimal.