Refs #8372 - support for foreman_ssl_* options

I could see this being confusing since puppet wise it will leave it unspecified. Using ssl_ca is smart proxy behaviour. Not sure if it'll actually a problem.