Currently DeploymentRoleHostgroup infers the deployment-to-role group via the deployment-to-hostgroup and hostgroup-to-role link. I guess we could eliminate this and add a role ID to the other join model, but I was afraid the 3-way join model would be more confusing.