central syslog service, i.e. logsink.stanford.edu.

This change is to allow the v7 rsyslog template to be corrected
without changing the default rsyslog behavior.

* Forward messages to central syslog server
* Change date format

Add an apt preferences file to use the rsyslog version from
backports.  Remove preferences installation from the syslog
module.

* which cannot resolve to themselves.

Correct variable used to identified the syslog server to send output
to in base::syslog::fragment.

Update comment documentation in base::pam::workgroup.  Remove unused
parameter and variables.

The output templates can be ignored if they are not useful for a
specific configuration.  Most of them time they are useful and
releaves custom configurations from the responsibility of installing
the templates separately when they are needed.

When using v7 add an apt preferences fragment that pulls rsyslog
from backports.

This also leaves a place for redhat folks to add special processing.

This should be overridden for testing syslog sink configurations.

Globally disable monlist in all the ntp.conf variations to protect
against use of monlist to launch UDP-based DoS attacks.  This was
probably already prevented by firewall rules, but may as well make
sure.

Change the filter-syslog rule for Debian to a broader pattern to
match more of the buggy power limit notifications generated by
newer Dell hardware.