More logical. Also add comments.

s.r.cmmi 0.2.0 switched to buildout2-style, so we follow.
In the meantime, use a fixed target-list if it proper conditional
section is not supported.

This is still secure because we use HTTPS, then url is encrypted as well.

By don't creating the inituser file if it has already been done once.

disable FIPS explicitly, otherwise stunnel fails to start with the following output :

Threading:PTHREAD Sockets:POLL,IPv6 SSL:ENGINE,OCSP,FIPS
Reading configuration from file etc/stunnel.conf
FIPS_mode_set: F06D065: error:0F06D065:common libcrypto routines:FIPS_mode_set:fips mode not supported
Line 5: "[remote]": Failed to initialize SSL

so that responses without max-age will not be cached.

This revert e7083872. This change must be applied
only when we will have newer version of slapos.cookbook

(cherry picked from commit ea3bc600)

This revert e7083872. This change must be applied
only when we will have newer version of slapos.cookbook