temporary fix for sso_rp/ca.crl.erb using the now-removed roles[sso] hostlist