ocf_dhcpd: remove separate pool for kvm

The KVM pool originated when makevm assumed the DHCP server assigned
VMs using DHCP a single IP address. makevm connected to the server on
this IP, assuming it was the new VM.

The pool of more than one IP was a somewhat unreliable hack to allow
multiple VMs to be spawned simultaneously. makevm no longer cares about
a small pool, and instead uses the ARP-advertised IP address of the VM
(matched with its MAC address), which is far more reliable.

So, we no longer need a special pool for KVM, and can just move those
addresses into the main pool.
Add peterwu/root privileges
Install ipython, ipython-notebook, matplotlib
Install python-numpy, python-scipy
desktop/xsession: ensure directories for user icon
site.pp: don't mandate aptitude provider for packages

We don't need to force use of aptitude now, and can instead let puppet
determine it automatically (probably using apt).
desktop/grub: fix unrestricted boot on wheezy

c1b21cb mistakingly added --unrestricted to all GRUB boot options, with
the intention to not require the GRUB username/password on boot.

This is the correct approach on jessie, although it's not necessary on
wheezy. Unfortunately, the version of grub2 on wheezy doesn't even
recognize the option and fails to boot, even after entering the grub
username/password.

So, we ensure that `--restricted` is not present in grub configs to
clean up the previous mistake.
desktop: move terminalrc to new path
desktop: remove wheezy testing code
desktop: don't overwrite pam common-auth and login

In b682f5, a naive me thought to remove pam_authdelay by removing the
line from two pam settings files and puppeting the entire giant files.

As Dara points out, this is what actually broke pam-auth-update (in
addition to being messy). It was only intended to work around a
persistent lightdm freezing bug, which is (hopefully) no longer an
issue. So, we can remove these files.

(If we decide to disable pam_authdelay again later -- which isn't really
a bad idea on the desktops -- we should do it not like this.)
Revert "desktop/grub: fix unrestricted boot on wheezy"

Reverting this change in the jessie branch, since it won't be needed
after merge (and we're already similarly removing other version
detection cruft).