Limit jails to a single type, but still allow templates

- While here, fix the devfs security issue
- Added new 9.3 templates, updated pkgn with them

Ticket: #5058
Ticket: #5948
Ticket: #5419