rename old config object to TempestConfigPrivate

this attempts to make it clear to folks they should not be calling
this directly. The proxy is needed for lazy evaluation, so don't
call this.

Fix one issue where a config addition was landed before we got this
in tree.

Change-Id: I16eeee12aec4994c31a8bafdf12c7eddc98dff18