Change: Set permissions for various files
Change: Make firewall dynamic

To pass 2nd penetration test we need to ensure that rules which
are not needed between machines are shut off.  To achieve this,
this change introduces a simple library to build an iptables
ruleset depending on the efg env.
Change: add static ruleset for bastion

The bastion host will always have the same basic ruleset.  This
template simply provides this ruleset.
Add: Provide ssh banner

Another pentest requirement.  This ensures the banner is shown on
login or attempted login.
Add: Password complexity policy

Required to pass second penetration test.  This sets the complexty
rules using PAM.
Fix: Use correct rails envs

The intial version which underwent the first penetration test
incorrectly assumed that rails env should be the same as the
efg env.  This change fixes this assumption.
Fix: New database.yml template
Bump to 0.10.9