Bump chef client

Updating chef-client to 11.16.4 because a per bflad/chef-docker#215 SSL fixes included in chef-client >=[11.16.0](https://www.getchef.com/blog/2014/09/08/release-chef-client-11-16-0-ohai-7-4-0/) are now required to do SSL with docker.io.

Also, envshuffle all the things.