Move tomcat ssl port opening to firewall resource in install step
Add unless statement to 'create key' resource