(PDB-813) Upgrade trapperkeeper, and move certificate-whitelist

This patch upgrades trapperkeeper, and the jetty component to the latest
revision. All lines of this patch are attributable to getting this to
work.

The major change was the change to certificate-whitelist, which is
not supported in trapperkeeper-webserver-jetty9 so we had to intercept
the configuration item, deprecate it and move it to the [global] section
so we could do this work ourselves.

Signed-off-by: Ken Barber <ken@bob.sh>
Like we discussed in the channel, we might want to put this in a puppetdb section to avoid conflicts. We don't currently support deploying PuppetDB with another TK thing, but if we need to do that in the future, we'll have to deprecate and remove (requiring a major version bump etc). Seems like it'd be pretty easy to move it now and avoid that hassle.