Clear ufw rules before applying the desired config.

Previously every run of `cap provision` would cause ufw rules to
accumulate: old rules would never be removed. Now, each provision
clears existing rules so that there is a clean slate each time.

Also, use `ufw --force enable` instead of the hack `yes | ufw enable`.