We do not necessarily always want to use the deployment
host for certificate generation. This patch allows the
deployer to set an alternative host to delegate these
tasks to in the same pattern as has been done for the
service registration tasks.
Additionally, due to the way this is done we can also:
1. Remove the task to install pyOpenSSL, because it is
already in the Ansible runtime venv for both role
tests and the integrated build. We have set the
python interpreter correctly to ensure that we have
access to it.
2. Consolidate the 'install' and 'config' tasks into
a single task file. Given that most of the 'install'
tasks were doing runtime configuration, it seems best
to rather move them into a single file and use the
'config' tag.
Change-Id: If2f1ab03ccd9400fe05e2948ddfe33c8796dbd97
6c73550005