need to be able to associate a role with dev nodes, especially storage

consider sysadm.common_subject running fdisk (fstools.common_subject)
now sysadm.r:fstools.common_subject needs to create partitions and so sysadm.r needs to associate with for example fixed_disk_dev

eventually i probably want to support associating roles with all objects