fix ssh access of appserver to cleanser jail
be more conservative with jails' net access
install required packages for cleanser jail