second step of #45, move all key file references/generations to new local/env location, move roles_local to local/roles