Fixed a few bugs

* Reintroduce the *nodetool* var
* Make the purging of old certs optional

Change-Id: I4ddfbbf41891ec6fe643d3b17f85468e500a005a