heat: configure allowed_address_pairs on load-balancer node only