Default to undef for hiera params

This removes the requirement for users to have the ssl params set in
heira.  We now default to undef.