Kubelet talks securely to apiserver

    Configure apiserver to serve Securely on port 6443.
    Generate token for kubelets during master VM startup.
    Put token into file apiserver can get and another file the kubelets can get.

We want to lock this down -- either with umask or a chmod afterwards.