Make Vagrant CPU usage be more sane on hyperthreaded systems.

Fixes #2359
Get Vagrant to start using TLS client certs.

Also fix up cert generation. It was failing during the first salt highstate when trying to chown the certs as the apiserver user didn't exist yet.  Fix this by creating a 'kube-cert' group and chgrping the files to that.  Then make the apiserver a member of that group.

Fixes #2365
Fixes #2368
Merge pull request #2369 from jbeda/vagrant-fix

Vagrant fixes
Remove confusing function; add TODO and explanation for (nonfatal) error message in integration test.
Make the output kubectl.sh narrower
Fix service e2e test, by eliminating the assumption that ips are re-used.
Merge pull request #2383 from brendandburns/fix

Fix service e2e test, by eliminating the assumption that ips are re-used
Merge pull request #2391 from lavalamp/fix3

Remove confusing function; add TODO and explanation for (nonfatal) error...
Merge pull request #2390 from ddysher/random-fix

Use Service.Name for validation error.
Merge pull request #2389 from satnam6502/kubectl

Make the output of kubectl.sh narrower
Exclude service itself when checking conflict.