Cluster: separate users, ssl and validations modules

There's lots of code scattered about that:

• creates a user or a group

• creates a ssl cert

• does some pre-configure validations/checks

This would be easier to maintain if each of those had a separate module