Do we need two roles, after you've added `authkey_generator` and `authkey_writer` recipes?