Things encountered while building the Chef demo

Include SSL certificate in the policy JSON; allow reading policy from URL.
Funny, nowhere in docs it says that `uniq` is stable. Though I guess it is on MRI.