configure service hosts too, and move ansible-pull tasks to 'base'
install ansible repo in service account's home (not working)