WHIRR-253. ZooKeeper service should only authorize ingress to ZooKeeper instances (tomwhite via asavu)