Implement roles management for nodes. A bit ridiculous how Chef let's you put *anything* into the run_list, without any validation :S