Fix the SaltStack setup of the Docker subsystem.

I'd love to get rid of the custom container_bridge state but I don't think this covers all the basis.  Specifically I think we are missing the iptables rules to NAT out through the main ip on the machine for all !10.0.0.0/8 destinations.

With that being said, it might be possible to minimize the code in that state.