Globally disable monlist in all the ntp.conf variations to protect
against use of monlist to launch UDP-based DoS attacks.  This was
probably already prevented by firewall rules, but may as well make
sure.

Lowercase the hostname when forming a Kerberos principal in the
out-of-date cron job.  Some Networking systems use .Stanford.EDU
in the official hostname.  (rra)

Ignore more buggy power limit notifications from new Dell hardware.
Several cases were missed in the previous change.  (rra)

Ignore buggy CPU core power limit notifications from new Dell
hardware in default Debian filter-syslog rules.

This change does not affect the current usage of the module.  It does
allow manifests to choose to retire /etc/syslog.conf in favor or
fragments in /etc/rsyslog.d to control the syslog activity.  One
default fragment, 90-local.conf, that writes syslog messages
locally.

This change also include a fragment define that is used for the
management of rsyslog fragments.

* since it's too easy to use a hyphen--which is invalid

These files are supposed to have different permissions (0660 for
btmp and 0664 for wtmp), which isn't possible using a single united
base::newsyslog::config stanza.  Separate them into two stanzas
with the correct permissions.

Map Ubuntu raring to wheezy instead of squeeze for the Stanford-local
Debian repositories.

Ignore some more harmless messages that appear to be caused by
someone connecting to the server and then disconnecting without
trying to authenticate (such as when they realize their Kerberos
ticket is expired or doesn't exist).

Add additional ignore patterns for failed ssh logins from IT Services
staff.

base::remctl no longer installs remctl-client.  This is going to be
handled by the stanford-server-packages metapackage, and is
independent of what's set up by this module.

The acceptable runtime for tmpreaper (used by base::tmpclean on Debian
and Ubuntu) has been extended to 20 minutes globally, and the
base::tmpclean::longer class, which existed only to do that, has been
removed as unnecessary.  The longer runtime limit should not pose a
problem on any system.

Clean up formatting and comments for installed files and Puppet
manifests.

base::daemontools::supervise now uses current coding standards and no
longer special-cases various default options to some of its
parameters.

Move campus anycast DNS servers to the bottom of the DNS server list
for now.  These are not yet considered production DNS servers.