Add ferm::service rule for zookeeper admin port

This will only allow hosts in the analytics cluster to connect
to the zookeeper admin port.

RT 6999

Change-Id: I1421e51afa065df4dca11a9926c83f65923fadaf