Modify provisioning agent so that port changes are made against a machine

Port changes on a machine may be required under the following two circumstances:

* open_close_ports is called for a given service unit
* the service units assigned to a machine changes (eg a service is destroyed)

This should then call the provider to make any actual port changes, after determining what ports should be open for all service units on that machine; and what ports are currently opened.