(PE-6162) Initial docs

This commit does two things:

* Introduces some initial documentation about settings, known issues, etc.
* Splits the CA settings into their own config file for ezbake.
Same comment here as for this section in the puppet-server.sample.conf on being more specific about what "certname" means...