guard reference to grains.cloud

Prevent errors during provisioning if grains.cloud has not been initialized.
I'd move this up above the pillar.  If the pillar is there we can use it regardless.