Moved role constraints into model

The same as https://github.com/crowbar/barclamp-ntp/pull/59