Deal with nested configurations but only cope with a single role per host for now