created a role to enable traffic filters, strip custom headers, and remove diversion headers for now