Full review (do not merge)

Although these things can be overriden in our installer, I think this is a sane default. What folks think? @domcleal ?

I think we have the foreman-setup which could set it for us correctly too. Not sure how this should work with plugins tho.