This patch fixes two problems with RabbitMQ's SSL/TLS listener.
* When self-signed certificates are used, the CA cert isn't created, but it's
included with the RabbitMQ server config anyway (bug 1507364).
* Self-signed certificates are owned by root within RabbitMQ's configuration
directory and are unreadable by RabbitMQ. User-provided certificates aren't
affected (bug 1506992).
Closes-bug: 1506992
Closes-bug: 1507364
Change-Id: If4f6a325eea4772f2fad4604785241b67adfaaf6