Define attribute for keystone group
Fixes to SSL certificate generation

Several fixes, including:
 - do not recreate the certificate if it already exists
 - do not change permissions on directories that might be different than
   what we expect (code was assuming it was always
   /etc/<component>/ssl/{certs,private})
 - make private key non-readable by the world
webui: Some fixes related to SSL generation too

This includes:
  - remove toggle_ssl_files() javascript: this was just broken and not
    working fine. This is replaced by changes below.
  - really set insecure to true when generating certificate (it wasn't
    set in the json)
  - also make the path to certificate and key files disabled
webui: Fix string to be consistent with other barclamps
Create certificates in the second phase of chef run

Otherwise, the openstack packages are not installed yet, and therefore
the group openstack-<foo> does not exist yet.
Merge pull request #112 from vuntz/fix-ssl-generate

Fixes to SSL certificate generation