Pass collectives through to the middleware role

Previously there was an ugly cross-module inheritance pattern going on.
Caught and fixed in this commit on the pe_role side.
Don't use ssldir subdirs for cacheing

Previously, the certs/ and private_keys/ subdirectory of the
settings::ssldir directory were used to store cached copies of the
mcollective_server private_key and certificate, needed for setting up
mcollective. However, storing the cached copies in these directories
caused a problem because then two "different" certs could exist on the
same system, but with the same serial number. It confused Puppet's
certificate authority service.

The fix is just to move the cached copies to a different subdirectory,
in this case ${settings::ssldir}/mcollective. Somewhere that the CA
won't see or become confused by them.