Backport from havana 'shared' + 'router:external' nets for non-admin rol...

...e users to use

Verified with fab run_sanity + manual tests