Fix galera rsync

Since galera will bootstrap on the node that owns cluster_control_ip,
the galera key/cert should be rsync'd from that node.