This patch is meant to address false-positive issues found
by running the bandit static analysis tool. Most of the issues
flagged were false positives, so the 'nosec' keyword has been
added to the instances in order to allow bandit checks to pass.
The one true positive was an except-always condition, which has
been reduced to only continue for IOError cases.
Change-Id: Ib9c51377544ca2dc7789a8eaabf9c432c579e00e
(cherry picked from commit ee7a2409fbf6d16e6fd65f0d227b0da8f0b8561e)
ce5674b326