Secret has attributes
grant a list of privileges in one method call
implement enrollment; properly specify Host.roleid
add has_attributes#refresh