Removes dependency on director and hacky use of url module
No secrets need to be passed to the role any more.
Adds an asynchronous step to the procedure, but once these agents
are set up we don't need to touch them for years anyway.