TODO

   1  * handle SIGINTs so file descriptors are dropped properly, otherwise we get bus errors next run
   2  * document conf file settings
   3  * add comment starting with XXX where ntpd should start up (see mail from jul 22)
   4  * compile list of sysctl values divulging virtualization status
   5  * integrate landry's laptop-checking mechanism
   6  * add/integrate /etc/os-release provision