only include nrpe checks on internal hosts

as it's the only place where nrpe will be installed...

Change-Id: I05d8e2087a578e53293f456b2f8a88d0f73ead4f