It's a little bit different than the current service_role setup but I like the idea of using it, maybe take a look at it later?