role variables are in defaults instead of vars