Just a nitpick, but would it be clearer if instead of no_ntp we used something like configure_ntp that defaults to true?