Bugfixes for cert install recipes

* Includes reformating of stage/prod worker playbooks, to eliminate
  inconsistencies that made them difficult to compare.