whoops incomplete chef-hosted keys update, and removing dead code and unpermitted actions
(so that the keys as checked in are relatively safe, don't have quite as many permissions at chef-hosted as the one we almost checked in!)
add a way to run commands before invoking knife, needed where rvm is installed