Don't manage PKI if domain is not present

To properly generated default certificates, Ansible requires a domain
name, without it openssl stops working. To avoid problems on hosts
without a domain present (Ubuntu workstations without prior
configuration, for example), debops.pki role will skip the management
entirely and disable PKI support in Ansible local facts.