no config_parser need to read role from cert_file