second step of #4, move all key file references/generations to new local/env location, move roles_local to local/roles