* Add verify required and CA bundle to haproxy
* Add base constraint so gnocchi metricd is tied to core-clone