Add common role, tighten up static app playbook