Replace default provider with new iocage provider

[zachfi]

This work replaces most of the heavy lifting with a new provider that leverages an external tool, iocage. This should help avoid the complexity and noise that comes with trying to do procedural work in a declarative language.

Thanks to robak for tackling the jail problem.