* added local paths to allow multiple installations per host
* moved pwpolicy default to model
* added a sample intervention