Squash sanitized-debian and restricted-ssh into the debian-prereq role. I’m never going to use these independently.