Adds fail2ban.
Splits hacky global-var credential definitions out into its own (example) file, adds ignore for the real thing.