source address moved to attrs, has to be indicated in role