hmmm, idempotency problem with dynamically figuring out external network
device...
changing how filters works requires changes to auto group vars