Bulk metadata fix
Expand CIDR addresses in the cookbook so data bag does not need preprocessing
Sort the groups
Simplify this template, don't depend on 1.8 stringification