The ca role will be a separate node able to create and sign
certificates. All components that need a certificate will get it
from this node. Since we are going to have one common certificate
for the synnefo.live CN including all DNS alternatives (astakos,
cyclades, vnc, etc.) this certificate will be created in advance and
everyone will get it during setup.
The cacert.pem will be added to the firefox db via certutil -A.
snf-vncauthproxy will use the corresponding cert.pem and key.pem.
Signed-off-by: Dimitris Aragiorgis <firstname.lastname@example.org>