Validate that we don't allow frictionless master, etc

Frictionless install is only supported for agent-only installs, so we
check that any frictionless node doesn't have any non-agent roles
specified.