Restrict metadata service to only listen on admin IP address

This service is dedicated to instance guests, and is proxied there. It
should not be reachable from the external network.

Also, do not make it use SSL as quantum currently only supports metadata
running on http.
Merge pull request #180 from vuntz/restrict-metadata-access

Restrict metadata service to only listen on admin IP address