* handle SIGINTs so file descriptors are dropped properly, otherwise we get bus errors next run
 * document conf file settings
 * add comment starting with XXX where ntpd should start up (see mail from jul 22)
 * compile list of sysctl values divulging virtualization status
 * integrate landry's laptop-checking mechanism
 * add/integrate /etc/os-release provision