Fix associate additional vpcs to zone

Role change to allow additional vpc's associated to a zone. Purpose f.e. centralized dns recursor who can resolve addresses of other private zones.

assoc_add_vpcs is additional and therefore not breaking current implementations.