added rule to allow tcp 3306 for extern MySQL access, added conditionals as placeholders in cinder element