move compute rules to roles
hide passwords in output