rework role assignment and chef key gen