roleaccounts: add dsa, letsencrypt