Generate self-signed certs if needed

- also some puppet-lint cleanup on touched files
- add apache license to selbooleans.pp