Pass IP whitelist to lockclb from playbook.

Fixes #851.

Attn: @smashwilson 
Oh, yeah, that's much easier than trying to fuss with the vault. :100: