At least the internal roles should switch to this. Trickier for the published roles since the SSL role isn't published and isn't quite as generalized as the others (or rather, we don't necessarily want people to be required to use our SSL role if they want to enable SSL when using our nginx role - but maybe that's ok).