Initial role implementation

Seems like maybe this `state=restarted` should be conditional based on whether or not files are written.  Maybe another `service:` call after with an unconditional `state=started`