clarify run-list details re: knife node and knife role
add domain authentication to knife windows