just include ldap::role::client::labs in role

just like virt0 does, do not include nss

Change-Id: I4839d346028cc22986ae07222dbf2303ef8c8f6c