virtualenv as separate role