refs #4345: Add a server_ca_proxy

http://docs.puppetlabs.com/guides/scaling_multiple_masters.html#option-2-proxy-certificate-traffic
describes how to set up a proxy CA. This adds a parameter to set up the
ca proxy on the puppet master.