Chef script to lock down ubuntu server