split jail role into two: base-jailhost and jail

* base-jailhost would install ezjail and prepare all other stuff
* jail would be used to actually define jails
fix formatting
wip