Make the constraint checks reusable
Do not return nodes that do not pass a constraint

BNC#865811

E.g.:

     $ crowbar keystone element_node keystone-server

should not return any admin nodes, as they cannot be assigned to the
keystone-server.