Allow setting ca_certificate option for metadata api

This allows os-collect-config to pass a ca_certificate when making
requests to an SSL metadata server.

Change-Id: I06056c0d3a4f26f7483980305898e4e2b1e08c6e
Grant privs to localhost and flush privs

When creating new users privs should also be
granted to localhost and flushed.

Change-Id: I18d280fbbdb64b4dabfc0ee1c0f61cd8294316f7
Merge "Allow setting ca_certificate option for metadata api"
Merge "Grant privs to localhost and flush privs"