Extract dnsmasq to a role