puppetmaster: acls only in apache for puppet 3

Due to a combination of unfixed bugs and lame syntax changes (only one
allow_ip directive allowed per directive in auth.conf) it is practically
impossible to enforce our ACLs via puppet configuration. That was
anyways redundant as we had ACLs in apache already, so we're removing
them right away.

Change-Id: Ie7388f49493459e1259ab21cd181f3e94df24cd6
Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org>