Skip cephx if disabled

If cephx is explicitly disabled, skip the key generation.  This touches a lot of the same lines that commit c48998a6b9b24b4b47027ba7ddd7dbd063ce71fd touched when it added support for storing keys in encrypted data bags.

Since cephx is on be default, it makes the code cleaner to record that in the default attributes.