restrict-gce-metadata not tolerant to table locks, needs to reuse core ansible code?

[smarterclayton]

TASK [restrict-gce-metadata : block access to the GCE metadata server] *********
task path: /usr/share/ansible/openshift-ansible-gce/playbooks/roles/restrict-gce-metadata/tasks/main.yaml:2
...
fatal: [ci-pr60-ig-n-vjsv]: FAILED! => {
    "changed": false, 
    "cmd": "/sbin/iptables -t filter -I OUTPUT -d 169.254.169.254 -m comment --comment 'Prevent all users from reaching GCE API server' -j REJECT --reject-with icmp-host-prohibited", 
    "failed": true, 
    "invocation": {
        "module_args": {
            "action": "insert", 
            "chain": "OUTPUT", 
            "comment": "Prevent all users from reaching GCE API server", 
            "ctstate": [], 
            "destination": "169.254.169.254", 
            "destination_port": null, 
            "flush": false, 
            "fragment": null, 
            "goto": null, 
            "icmp_type": null, 
            "in_interface": null, 
            "ip_version": "ipv4", 
            "jump": null, 
            "limit": null, 
            "limit_burst": null, 
            "match": [], 
            "out_interface": null, 
            "policy": null, 
            "protocol": null, 
            "reject_with": "icmp-host-prohibited", 
            "set_counters": null, 
            "set_dscp_mark": null, 
            "set_dscp_mark_class": null, 
            "source": null, 
            "source_port": null, 
            "state": "present", 
            "table": "filter", 
            "to_destination": null, 
            "to_ports": null, 
            "to_source": null, 
            "uid_owner": null
        }, 
        "module_name": "iptables"
    }, 
    "msg": "Another app is currently holding the xtables lock. Perhaps you want to use the -w option?", 
    "rc": 4, 
    "stderr": "Another app is currently holding the xtables lock. Perhaps you want to use the -w option?\n", 
    "stdout": "", 
    "stdout_lines": []
}

https://ci.openshift.redhat.com/jenkins/job/zz_test_gcloud/60/consoleText

[smarterclayton]

Fixed in #11