Preservation of controller / machine agent TLS settings during upgrade

[mprzybylski]

When a customer is running a TLS-only VIP with a privately-issued certificate in front of the HA pair, a fair amount of custom config is required:

• Trust store containing the private CA's root certificate
• Additional trust store password in agents' controller-info.xml files, (must be encrypted with scs-tool.jar as of v4.3).

All of this customization is likely to be blown away by the installer next time it is used to upgrade the controller.

HA toolkit should automate the preservation or restoration of self-monitoring TLS config.