Refs #8372 - support for foreman_ssl_* options

I think these should default to the Puppet certs set in ssl_* above.