example vars update: by default do not allow any subnets to chronyd
example vars update: by default do not allow any subnets to chronyd

 - this is then overridden by each group
 - #103

mantti/fgci-tut,mantti/fgci-tut,mantti/fgci-tut