Fixes to SSL certificate generation

Several fixes, including:
 - do not recreate the certificate if it already exists
 - do not change permissions on directories that might be different than
   what we expect (code was assuming it was always
   /etc/<component>/ssl/{certs,private})
 - make private key non-readable by the world
webui: Some fixes related to SSL generation too

This includes:
  - really set insecure to true when generating certificate (it wasn't
    set in the json)
  - also make the path to certificate and key files disabled
webui: Fix string to be consistent

self-signed, instead of auto-signed.
webui: Set xxlarge class on file type inputs

For text input fields that take large amount of data (like a full file +
path), setting input-xxlarge class helps with getting a proper display
when using bootstrap.
Create certificates in the second phase of chef run

Otherwise, the openstack packages are not installed yet, and therefore
the group openstack-<foo> does not exist yet.
no need anymore in keystone here
Fix cinder.conf when using manual driver configuration

The first line of the option was put on the volume_driver line too,
which obviously broke cinder. Adding the empty line in the template
results in what we expect.
Merge pull request #68 from vuntz/fix-ssl-generate

Fixes to SSL certificate generation
Merge pull request #78 from MirantisDellCrowbar/bug/DCB-147/pebbles/master

For PFS no need anymore in keystone here
Merge pull request #80 from vuntz/fix-manual

Fix cinder.conf when using manual driver configuration
Merge pull request #71 from dirkmueller/release/pebbles/master

Use xxlarge for file inputs
Insert EOL properly