urn off chef client on gateways and lxc hosts to prevent firewall changes during migrations.