Add postgres/mysql roles, update certs/keys post-heartbleed, etc.