Fix certificate/key/chain file's group ownerships on BSD Unix

[xenophonf]

The name for GID 0 is different on BSD Unix.

Summary of Changes

• Added three os_family checks; if they match *BSD, the states use the wheel group instead of root.

Testing

• Tested on FreeBSD 11.2-RELEASE
• Tested on CentOS 7.6.1810

[myii]

@xenophonf Thanks for this. This closes #258, right?

In terms of the implementation, to avoid the extra Jinja conditionals, couldn't these differences be provided in the osfamilymap?

[xenophonf]

Yes, this closes #258. Do you want me to refactor it to use osfamilymap?

[myii]

@xenophonf I believe that's the correct solution but it will require making entries to each OS family. If time is short, I'd have no objections to this being merged as-is. Perhaps adding an issue to remind us to move this to osfamilymap in the long-run.

[xenophonf]

We could set the group to root in the defaults and then override it on a per-family basis. That should keep things clean and simple. I'll take a look at it after work tonight.

[alxwr]

I'll take a look at it after work tonight.
(13 days later...)

I feel your pain. :-D

I'd vote for osfamilymap too.

[noelmcloughlin]

Fixed in #283