108: Private subnet has proper tags

Simplified the DSL and added tags where I could. Removed the redundant
comments that @3000 rightly pointed out yesterday.

:pear: @3000