make hooft a real 'bastionhost'

let hooft be a real bastionhost by including
the role

this is to unblock Change-Id: I61f2f9fcb6392ea1
which in turn should unblock Change-Id: I6a7e07c416ef3464a
:)

Change-Id: I3fb21db64beb3ba381693920bb4d2339517659e1
Set state file path for osm ganglia plugin

Also fix the too strict permission for /srv/osmosis while at it so that
the plugin may work

Change-Id: Ic87621f8d3a441ef240a284a768408761a4365c4
Merge "make hooft a real 'bastionhost'" into production