Use roles insteadof envs.