Fix rootwrap for non openstack.org iqn's

The encryption methods implemented for attached volumes
require a symbolic link created to the /dev/disk-by* iqn.

The current implementation works fine for LVM, however the rootwrap
is restricted to only allow iqns of the form openstack.org, for
vendors that use their own target and iqn this won't work and will
result in the attach failing for unauthorized command.

This just makes the regex for the rootwrap filter a bit more
permissive, only looking for iscsi-iqn.*

Change-Id: I023ad24867c045a88f72c5ac7ac4e4da097a3643
Closes-Bug: 1362854
Fix service groups with zookeeper

Service groups using zookeeper don't work due to apparently improper
handling of the zookeeper session creation.

No additional unit tests as the mocking these interfaces probably
doesn't actually provide substantial future guaruntees. The correct
long term fix is to enable zk for unit testing upstream.

Change-Id: I21691843cb4936d10a0b82df41aef3afe5bf2519
Closes-bug: #1239864
Block sqlalchemy migrate 0.9.2 as it breaks all of nova

This is breaking nova unit tests

Change-Id: Ic82d787e41f7b6d6153d3c6b19902cc11a1c43bb
Closes-Bug: #1368391
Merge "Fix service groups with zookeeper"
Merge "Fix rootwrap for non openstack.org iqn's"