Set clustertemplate:publish to admin only
Set the clustertemplate:publish policy to be admin only by default -
currently it is admin_or_user, which means any openstack user can create
a public cluster template.
Update tests for bay model and cluster template, splitting tests
requiring admin credentials into a separate class.
(cherry picked from commit 12052b1253)