bootstrap: restrict ipolicy to enabled disk templates