Moved secret stuff into util/config.js and tried to get roles working. Still not happy.