Move galera DSM password set into role

Role groups check with template drop so password is not set in config
before it will work.