chef: remove client certs if user has been suspended
zookeeper: improve ensemble handling
zookeeper: fix missing zookeeper_nodes