Added all items from CIS Section 7 Levels 1 & 2

https://benchmarks.cisecurity.org/tools2/ubuntu/CIS_Ubuntu_12.04_LTS_Server_Benchmark_v1.0.0.pdf
I'm going with the idea of a notifier.  I just used a sysctl ansible handler to set the route.flush to 1.  Ezpz.  That way it gets run after all the tasks are applied if any of them request it.