* Fix duplicate entries in /etc/sysconfig/iptables
* Remove neutron-managed firewall rules from /etc/sysconfig/iptables
* Add base constraint so gnocchi metricd is tied to core-clone