changed nmap to only run on boxes that match our policy to reduce time it takes to run second chef-client