deploy: Add vnc role

snf-vncauthproxy can now run on a separate node.

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>
deploy: Use the certificate issued by our CA

Apache and VNC will use the certificate previously issued by our CA.
For the Client we add this certificate to the system wide accepted
ones via update-ca-certificates and to the firefox database via
certutil.

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>
deploy: Configure cyclades for remote VNC proxy

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>
deploy: Cleanup useless actions wrt certificates

Since we are using a proper CA we do not need cert_override.txt
nor we should update-ca-certificates for skakeoil cert.

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>