use double quotes to fix env interpolation, fix role