add the openstack-nova-cert service which now handles the CA folder
    
    This generates the root cert at startup and subsequently
    manages access to the /var/lib/nova/CA folder to ease
    sharing between distributed services.
    
    See https://bugs.launchpad.net/nova/+bug/918563