osx defaults don't get picked up unless they're in the base role, so move them there