Restrict metadata service to only listen on admin IP address

This service is dedicated to instance guests, and is proxied there. It
should not be reachable from the external network.

Also, do not make it use SSL as quantum currently only supports metadata
running on http.

Note that this pull request depends on https://github.com/crowbar/barclamp-nova/pull/178