hosting: start using a ssl_cert define

This handles all the low-level details of deploying a ssl cert:
  * cert
  * key
  * optionally appending a ca bundle
hosting: unlock more directories for the admin group