Move bacula::bacula_ssl_{server,client}_{cert,key} to hiera