Major cleanup of manifests.

Bringing in SFU/RHEL/Debian changes that have been around for months
that I was too stupid to know how to pull in. Most changes centered on
SASL binding Red Hat systems to Active Directory.
Debian/Ubuntu: Remove ecryptfs stuff.
Debian/Ubuntu: Add "account require pam_access.so" to sss
auth-client-config profile.
Remove TLS authentication. Should parameterize this later.
Rename variables.pp => params.pp.
Anchor 'puppet:end' should be 'sssd:end'.