mirror ssh firewalling setup from ferm/templates/me.conf.erb with roles