Remove role for noomoahk
Use a common set of default resolvers, defaulting to cloudflare
Simplify firewall zones Move all hosts except those at Equiniz, UCL and Bytemark into the osm zone.
Add remote hands account to tetaneutral machines
Add role for noomoahk