Compliance - only scan internal policies

[dLobatog]

Without this external=false change, we are scanning external policies on 'insights-client --compliance', but those weren't manually assigned and should not be scanned. Furthermore, you could have 2 policies, internal and external with the same ref_id scanned.

[jenkins-qa-bot]

Can one of the admins verify this patch?