Break fail2ban into its own role, encrypt Slack endpoint