annotate the sample config
bugfix: we need to install rsync ourselves
update to nginx 1.2.7_1,1
bugfix: also use self-signed if no cert parameter was given
explicitly build python2.7

(the default version may change)
helper tool to update repo with new port configurations
update appserver config to new port versions
we need sudo inside the jail

for doing things as ``pyramid`` via ``ezjail-admin console``
don't rely on importing ``briefkasten``

this would require the deployment setup to include the entire
application stack.

instead we use the location of the deployment script itself, this way
the dependencies for the deployment script can remain minimal.
note to self
fix root access (why is this neccessary?)
always run buildout during update
we need to include the test_submission_secret
permissions are now fixed in ezjaildeploy already
fix supervisord startup

 - don't start its http server
 - give it an explicit log location
HACK: remove watchdog.py to avoid its dependencies during pyramid scan

(it should really be a separate# package altogether)
make zfs snapshots before and after updating
comment cosmetics
configure ssh_access for the app user to the cleanser jail
add config option for an optional cleanser host