pki: preserve template files during upgrade

In the past, pki template files were installed as %config but were modified
by both install and users now we install a template of these files
as %config.

Keep publish these files are %ghost.

Change-Id: I88e83b79a5a35060e41ff8356f31fffd5219f6ad
Signed-off-by: Alon Bar-Lev <alonbl@redhat.com>