remove ability to colocate other services with node other than all-in-one
Make sure node role cannot be added when modifying roles if host has a different role already