Optionally ship syslog to a log aggregation server.

If the following vars are defined in an environment,
  syslog_server
  syslog_cert_url

then all servers will have their system rsyslogs configured to ship
syslog entries to the named server using TLS encryption over TCP.

Syslog cert url should name an SSL CA file which is saved to /etc/syslog.ursula.crt,
and is used to authenticate the syslog server's identity when establishing connections.