role_manager uses etckeeper if present