Demonstrate and test publish+read complex data with hiera-etcd
enable to clean certs via api

We only allow maintainers access to the master, and
our kickstart cgi script cleans cert on rebuild, so
we need to be able to clean certs remotely.

If somebody accidentally revokes or cleans a cert on
production host, it's ok. We know how to deal with it.

Resolves https://github.com/ISEexchange/issue/issues/1035