gitblit - move certificate installation into role

..instead of putting it on a node directly

Change-Id: I967c5b15c56559f098a919b04260d75f89c09898