Basic common server configuration

**Role Variables**

.. zuul:rolevar:: bastion_key_exclusive
   :default: True

   Whether the bastion ssh key is the only key allowed to ssh in as
   root.