started implementing my rolefrags idea for managing when multiple roles need to update a single config file, like iptables