changed local_suffix to a builder that looks in %ENV
in the middle of work, the intersection of the three roles need to be handled better