break out MDS roles into its own group, shouldn't be installing the MDS on every OSD host in this example