Break out into machine_classes based on Facter variables
Set a default path
Default the firewall to deny