[DO NOT MERGE] Jail role

Other roles would depend on the `jail` role and pass the parameters (currently `name` and `ip_address`) for the jail to it. Note this does not start the jail.
can we actually just put real jail here, for example, I suggested `pgsql.int`.