Kubelet talks securely to apiserver

    Configure apiserver to serve Securely on port 6443.
    Generate token for kubelets during master VM startup.
    Put token into file apiserver can get and another file the kubelets can get.

We have more than AWS -- we need to get vSphere, rackspace and vagrant too.