Ignore selinux defaults for puppet yaml files

On my system files in /var/lib/puppet/yaml are created with unconfined_u while
the system expects them as system_u. This creates noise in every puppet run and
ensures the system will stay active in the foreman dashboard.
Ensure ERB template file is parseable by Ruby for non-installer users
Treat empty strings in SSL key/cert settings as disabled
Merge pull request #3 from theforeman/master

Resync with theforeman's github