Support using chef-zero in SSL mode.

This defaults to true because it's what we should be using, but
config files should turn it off if they're not ready.