fix for COOK-4488

Added logic for smartos so the default recipe will work as-is.  

I wasn't sure how best to handle the usePAM server attribute, but the unless logic does work.  The ssh service will not work if usePAM is present at all in sshd_config.

Still no smartos support for the iptables recipe since the iptables cookbook itself does not support smartos.