first pass at a ent-wide f2b
Set fail2ban defaults in more general hiera locations instead of node specific places