changes to the config_repos role so hopefully we can upgrade cleanly without reinserting the base repos