Install new rootwrap filters during upgrade

New code might rely on the new rootwrap filters
being in place. Fixes https://review.openstack.org/#/c/35107/
gating failure.

Change-Id: I0ed69b91250ee55e4695948f3290955e92486ae2