Includes hooks for triggering calico, kubelet, and kube-apiserver restarts
if etcd certs changed.

Also adds all masters by hostname and localhost/127.0.0.1 to
apiserver SSL certificate.

Includes documentation update on how localhost loadbalancer works.

test travis with sudo=true instead of required

Master and nodes will run the 'node' role, kube-proxy is run under a container, new script for ssl certs