Add iron.wikimedia.org to bastion_hosts

In order to have ferm populate its rules.
While at it add some comments to clear up the bastion_host landscape

Change-Id: I149bcceecdcfad031eae159a961423977a07a0ac