fixing (last?) hardcoded role name to use config