Track role changes, allow a mechanism for only SSH to be propagated on a role