Separate shell role out from dotfiles