Treat the control node as a CA for certificates at compute nodes.
Upon joining a cluster, the compute node will request a certificate to
be created by generating a CSR and asking the control node to sign the
certificate.
This adds new config options for the compute private keys and
certificate locations in use.
Change-Id: I8e8b1a86cf7df752b6cb34cfdf65a87a72934ec5