Simplify logic for cleaner code.
- Defined type to install SSL CA
- call SSL CA installtion virtually so that a server may be a client.
- SSL CA not required (may have had sa real CA sign our cert)
- use canonical puppet:///<somefile> paths for certs
- name destination certs predictable names, after the service(s) that use them