yeah I rather not do roles. It just seems like a lot of loose parts that can break. A limited key assigned to the application through secret volumes The rest smells like security theatre.