OpenShift.template fixes

This includes the following changes:
- requests from outside the broker were not reaching it without
  setting configure_firewall => true
- puppet module install was failing due to missing /etc/puppet/modules
- on the node puppet --apply was failing because the openshift_origin
  module wasn't installed
Change-Id: Ie6f1f0f6e2bdbde1521ffdd285041c87f3933e42
Generate the DnsSecKey inside the broker.

This means that the broker also hosts the bind server.

Change-Id: I29e79a64868ce5f4e7a3ab4dae45d7e361375ac1