Make initialiser process more sane in atwan & salt

  Merge away unnecessary initialiser steps.
  Clear up confusion between trust and configuration.
  Add preliminary support for SSH certificates.