Some fabric SSL setup fixes.

We now auto-generate a self-signed cert if there's no
SSL cert present on provision (e.g. for a local development
installation).