Plugin must be resilient to unreadable SSL certs 

This PR lets the plugin not use the private keys on /var/lib/puppet/ssl if they are not reachable and continue with the mco task.