helpers: update deploy to only deploy_roles when set.