Be sure to include rootwrap command filters

There are a number of commands that the baremetal service uses under
rootwrap. Make sure that all of these commands are available to the
service, lest commaands (and possibly deployments) will fail.