[ansible] Switch to bootstrap certificate until we have a letsencrypt one