This role sets acls that permit unprivileged users to:
- write inside a list of directories
- restart the tomcat instances (default). Or manage other services.