[BACKPORT: 4.1.3; 4.2.1] Bug fixes and service start/restart re-ordering

* remove conntrack tools from the list of packages that
  need to be installed
* re-order start/restart so this works with the stock
  upstream keepalived package from RHEL