_remove roles need to be deleted from the run_list
once they have been applied and executed