oic, this is strictly meant to be run with `--tags=deploy`.  We currently do that with our existing playbooks (ie. edx-west/prod-app.yml)

how about the nginx role, though?  does it pick those up, because there are tasks tagged 'deploy' there.