heat.yaml.tmpl: only define allowed_address_pairs on other nodes than the puppetmaster