Add root as a principal for the admin key.

core@ is root-equivalent anyway, so no point in not granting root@
as well.
Fix the authorized_keys entry for root.
Move etcd key setup to base services bringup.

This simplifies cloud-config, and just makes more sense in general.