Adding ironholds to admins::restricted.

RT 5935

Change-Id: Iddd50312bac011f07422334c24d2bc364d4fd18d