hiera hierarchy now includes a role tag