version pinning, support filters with ensure set to absent
ignore tenant roles should be an array
Merge pull request #15 from mwhahaha/version_pinning

version pinning, support filters with ensure set to absent