More fixes to qpid script.

* Fix CA name that Katello uses.
* Add clean option for developers.
* Sign CSRs with Katello CA elsewhere on the file system.