split jail role into two

* base-jailhost ensures that the service host has necessary
  infrastructure installed and configured (ezjail)
* jail role is to be used to create jails on the jail host
add a todo list
configure jails