Add bastion role with SSH options
    
    Configure thor* jump servers for strict SSH host key checking
    through SSHFP records in DNS.
    
    Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>