allow ssh_interface to be set to private_ips and actually work when public_ips exist
ignore_cidr should return false when unable to use netaddr