register role on startup rather than on install