Allow nss db files to be created for keystone integration

Specify keystone signing/ca.pem file and have radosgw recipe automatically convert these.
Only run if both ca/signing_cert and nss db path are specified.