hiera: use TLS 1 instead of TLS v 1.2, it fails on trusty hosts

Change-Id: I2d818c375e79bc95d8457aed7e615561ff3674c4
Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org>