Allow client certs to be read by apache

Although oo-mco ping will succeed, application creation will fail because apache cannot read the certs. Moving them to an apache readable location works around this issue. 
I was recommending not using the ```openshift_origin::params``` class directly but always through the ```openshift_origin``` class but now I'm recommending to stay consistent. So either keep it as it is now or change all references to ```openshift_origin::params```. It would make sense to do that in another patch.