Serve bind_key via apache and have other brokers wget it

Also move configure_dns_plugin to later so primary broker has a chance
to start. Note: this change may not be submittable upstream.