Get rid of security_mirror_onion role in favour of just keying off the ip address...