Bazel: Run plugin tests non-hermetically

The plugin tests required the plugin to be built and installed to the
test site (controlled by the test), so that this implementation is by
design non hermeticized so we can't run in the sandbox.

Change-Id: I39b981aaa4c6063f34e97db59a34b6a0f238e28b
diff --git a/BUILD b/BUILD
index a762da6..1f9058b 100644
--- a/BUILD
+++ b/BUILD
@@ -18,10 +18,12 @@
   ],
 )
 
+# For the reasons, how the plugin tests are implemented
+# they cannot be run hermetically.
 junit_tests(
   name = 'cookbook_tests',
   srcs = glob(['src/test/java/**/*IT.java']),
-  tags = ['cookbook-plugin'],
+  tags = ['cookbook-plugin', 'local'],
   deps = [
     ':cookbook-plugin__plugin',
     '//gerrit-acceptance-framework:lib',