COOPR-568: changes in the provisioner to use TLS when talking to the server

nitpick: above we pass ``options[:cert*]`` to PluginManager.new while here we pass assigned vars.  let's just be consistent