Make sysctl net.ipv4.ip_forward def safe

When using puppet-nova with another big Puppet modules
this sysctl may be defined before.

The solution is to make a definition safe.

Closes-bug: #1384145

Change-Id: I4d28f277bccd16f3719a4806e641461df3749518