conditionally generate service key params
rooty-toots: better handling for null defaultSslKeySha
add cloudos-dns data bags, update cloudos init databag
update vendor settings logic
use default status