move roles into host

yes. and the ConfigurationBuilder were the impetus for this change. since the roles API was broken in v5 with the new ConfigurationBuilder API.