work around foreman safe mode whitelisting issue

For foreman safe mode, !false fails whitelisted evaluation.
For now I added a separate method for determining non_ha
`!ha?` would be better, it does not duplicate the logic.