Removed unnecessary /etc/pam.d/system-auth-ac target from ansible.
Ansible: Changed iptables handler to service module.
Add iptables to required packages.
Added task to removed pam_lastlog from password-auth.
Removed password-auth from CCE-27291-4: display_login_attempts.
Added feature to disable iptables provision or provide outside source
for template.
Can be altered via site file.
Changed iptables option name to keep alphabetical.
Moved vars to defaults.
Keep distro-specific variables are regular variables.
Changed iptables handler to reloaded, this forces start if stopped.
Added basic usage document.
Added iptables tag.
Added iptables and other tags to harden main.
There isn't an 'all' tag yet.