cherry pick manage_repo from other official git repo
turns out logstash chroot doesn't respect supplemental groups if you're not that user,
so screw it we'll just make the key world readable since the only thing that should be on this server is trusted users anyway.
make SSL use 'localhost' so that vagrant+logstash is happy.
disable CPU profiling which causes an exit that looks like a crash after 60 seconds
the docs on this option were misleading and it wasn't til I finally opened up the code that I realized what was happening.
https://github.com/elasticsearch/logstash-forwarder/issues/304 for the gory details
short version: no need to ever enable this option.