Block a user
general: Add xdg-base-dir role
Turns out this isn't as useful as it might seem. Every role that uses config/data/state home directories ends up needing to create them anyway so there's no real benefit to having a dependency on…