[DO NOT MERGE] Jail role

Other roles would depend on the `jail` role and pass the parameters (currently `name` and `ip_address`) for the jail to it. Note this does not start the jail.
can we use `service` module instead?  I believe, we use it for all other roles.

On a related note, if somebody puts `jail_enable="NO"` in the file, the result will not be obvious.