Chef client sweeper

Updates the chef deregister script to be more stringent (hours instead of days), by assuming that all nodes will have a "firstrun" registered.

Paired with https://github.com/Kabam/distribution-devops/pull/72