This PS removes the requirement for the Nova Metadata API to run with
NET_ADMIN capabilities, and also enables lightwight images without
iptables present to be used.
This has no effect on operation if Neutron is used for networking.
Change-Id: Ie69c74240ca7fd054e3c897c2bf8ebc8ec5c1377