applying xen proposal fails after moving away from kvm

1. fix selecting new kernel when moving to/from XEN
2. restart xend service only when xen kernel is loaded (same for kvm modules)
(SUSE bug: bnc#836372 - can not switch compute nodes from xen to kvm)

3. only require certificate files for controllers (bnc#851514)