Only request certs in step 1
Only request certs in step 1

The certmonger-user service used to run in every step. This limits it to
only step 1.

Change-Id: I572d53bb6977e16d1deffe0127e17e48a8cda29c

openstack/puppet-tripleo,openstack/puppet-tripleo,openstack/puppet-tripleo