update foreman proxy stuff and ssl handling

I'm not totally proud of how the SSL key handling stuff turned out, but it works.