(MAINT) do not disable iptables on default

- this is the desired behavior until the disable iptables function is
  more reliable
Merge pull request #500 from anodelman/iptables

(MAINT) do not disable iptables on default
(MAINT) fix broken hypervisor config spec test