Fix typo
Add dc-ca role

This role adds the certificates for the domain controllers Beryllium and
Boron to the OS's database so that there is a valid chain of trust.
Update touchstone's MAC address
Fix leftover naming from BIND
Add Lounge Administrators OU to search base
Remove UTD DNS resolver

At the request of AIS
Add hack for unbound-checkconf chroot check

Sadly this does work.
Finish moving non-secrets from secret directory

This moves the last of the config files out of secret. Most files in
secret are now plain text files with just a username or password. This
means that make secrets is now nearly complete. The files that make
secrets cannot create are listed after running it.
Add domain names in pf.conf to hosts

This way the gateways can come up with the correct firewall rules even
without any network connectivity. This was a problem during power
outages when the gateways would try and load the firewall before UTD's
nameservers came up. This would fail requiring a manual reboot later.

Hard coding the IPs should not be an issue as monit checks every minute
that the A records do not differ from what has be hard coded in hosts.
Fix typo
Update checksums
Remove vsftpd role

vsftpd was used to host the siteXX set for quick OpenBSD configuration.
OpenBSD 5.6 will drop support for installing sets from ftp, so this will
no longer be used.
Create account config directory
Add owner group and mode to all applicable modules

This is Ansible best practice, and help us better enforce the principle
of least privilege.
Protect moved config from path attacks
Update IP addresses for smtp.utdallas.edu
Reorder functions
Fix formatting
Replace redundant functions with wrappers
Validate all of a username or netID