Use the openssl pkcs12 '-out' option to write pkcs12 keystore

Importing private keys was failing on Puppet v3.0 / Java7 due to corrupt PKCS12 keystore.
Using the '-out' option for openssl properly creates the PKCS12 keystore, and importing private keys is again working.