adding chef-client to base role