well, of course the roles won't be there if they're in the .dockerignore...
ah ha! maybe we do care about symlinks!
only want to copy what's actually needed for the build, then maybe later that
can be used as a trigger for a rebuild...
bug in docker.client? doesn't seem to import symlinks...