Tighten up firewall
Split out hiera data into common and environment
Open SSH everywhere in development
Provide a default of "undefined" for environment