Switch chef.osm.org to letsencrypt