verify ssl certs in chef
dont mess with cloud-init in clean, don't do hwe kernels any more, use
epoch timestamp for easier sorting