Allow client certs to be read by apache

Although oo-mco ping will succeed, application creation will fail because apache cannot read the certs. Moving them to an apache readable location works around this issue. 
Since ```openshift_origin``` inherits from params you can write ```${::openshift_origin::ruby_scl_path_prefix}```. Then it can easily be made into a real parameter without changing all the code.