Final changes related to PKI 

* Also fixes images being constantly installed (wrong nesting level for not_if!)
* Adds toggle for --insecure and region name correction in openrc generation