Add tls support

- Add the missing bootstrap_expect param
- Add the missing encrypt param
- Add encrypt_enabled param to make Consul gossip encryption explicit
I am going to have to look through this over the next few days. This is a bit of a smell to me. There has to be a better way to refactor this. But this is likely a result of how the service recipe is currently written.