remove duplicate is_atomic register for etcd
break conditional code into seperate yml files

this keeps main very clean
make etcd iptables handler idempotent
make master iptables rules idempotent
make the minion iptables rules idempotent
trigger iptables based on firewalld, not atomic
use iptables rules only when iptables-services installed
Merge pull request #2 from eparis/iptables

this makes iptables (hopefully) idempotent