the server only needs the user's public key

Also rename the users public key to be
`$HOME/.mcollective.d/${username}.pem` and
`/etc/mcollective/clients/${username}.pem` then the `callerid` is
`cert=${username}` rather than `cert=${username}-public`.  This is a
little nicer when it comes to writing out the actionpolicy lines.