The tls_support.pp class used a dubious reference to a variable
defined in the tls resource definition.  This was used to install the
ca cert required for accessing the central syslog service.  The change
requires that the cert be explicitly in manifests that want to use the
base::syslog::tls resource to install rsyslog fragments.