ignore private...
minor changes to make this look more like more recent roles...
hopefully adding ldap account support...