Update ssl reset script

Use puppet cert generate instead of requiring the user to ctrl-c
Back up certificates with timestamps so it's non destructive
Clarify the agent cert regeneration message