Clear master certs if we change puppet.conf

This is a hack for labs migration -- it only takes effect
if a special file is found on the host:  /root/allowcertdeletion

Change-Id: I9551ab2bbbdda1ad495b5941a15a0b9561f24feb