Wip 7810

NB this is based off https://github.com/ceph/teuthology/pull/298
That actually confuses me more. I think the docstring could use a more concrete explanation and maybe even an example or two. And *maybe* a unit test or two!

Also - what all does this have to do with the firewall stuff in nuke.py?