Move vpn_key_suffix into pipelib

Apart from one use in the EC2 API, vpn_key_suffix is only used in
pipelib.

blueprint: scope-config-opts
Change-Id: If90b9e77905161ea8d9263e8bae2c47ac5f79e91
Merge "Move vpn_key_suffix into pipelib"