Refs #8372 - support for foreman_ssl_* options

Agree with setting the default based on $ssl_*, right?