I do need to get more familiar with the implementation details of how configs manifest themselves when pushed down via TLS, just saying Heroku's 'role' naming for similar hosts should allow them to key off of with discovery queries