allow more heat-server roles