firestorm: split kerberos and ldap, clean up manifests
Rename firestorm -> ocf_{kerberos,ldap}