role template that are called by anything except users
should note be this inclusive

i dont want calling app to have such broad access

for example git calles gpg role, git had full access to
gpg home content!!!