ops-scripts cookbook... bringing in a fix-up script for deny hosts