Change NC migrations to first try qemu+tls, then fall back to qemu+ssh on failure
(then roll back if both fail).

Implements EUCA-5098.
Merge remote-tracking branch 'origin/team/evac' into testing