move roles into host

Don;t we need to change the signature of this to take `ConfigurationBuilder` instead ?