Add the contrail-dns package
Use dns user instead of control node user
Remove rndc.conf override

Authentication key fixed in the packaging.
Only install contrail-dns on Contrail >= 1.10
Actually do >= not >
Make $contrail_version a class parameter