make auth_unix_* platform conditional

Since this is only really needed on Debuntu systems (as far as we know),
we make it platform conditional.
put all non-boolean parameters in params.pp

let's just go all the way and put all of those parameters into params.
We now also set the correct group and the correct group permissions on
Debuntu. Btw, does anyone notice how on RHEL the package is libvirt, the
group is libvirt, and the service is unsurprisingly libvirtd, whereas on
Debian they are all stupid?
Merge commit 'a9169f95a5693d37b3eed89aee5466d70a2f548f'
Clean up params and the way they're used in the template

Instead of explicitly setting defaults which are the upstream defaults,
leave undef instead to make things simpler. With no explicit changes on
RHEL, we still have the original file, which makes no changes at all. On
Debian there are a few initial differences.