Chef client sweeper

Updates the chef deregister script to be more stringent (hours instead of days), by assuming that all nodes will have a "firstrun" registered.