Use bucket var, force a sync

@feanil @jarv 

Sorry for the whitespace changes key change to retire_host.yml at line 41, change to template also important.
Is the idea that we will change the jenkins jobs to run a job per E-D with the appropriate secrets included so that these vars are set?