cloud: simplify hooks, reinforme vm selector, fix haproxy ssl certs