migrate mysql to using roles, also included some mysql securing steps