Allow passing a CA key password when signing a cert

[bastelfreak]

This is a rebase of https://github.com/voxpupuli/puppet-openssl/pull/188/files?diff=unified&w=1