move Kiam to a plugin

[davidmccormick]

Create a new kiam plugin
Remove Experimental Kiam Support Code
Fix/Allow plugins to create ca's and use them to sign other certs. Note, the CA must be created first.
Improve logging around plugin extensions.

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
To complete the pull request process, please assign davidmccormick
You can assign the PR to them by writing /assign @davidmccormick in a comment when ready.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[codecov-io]

Codecov Report

❗ No coverage uploaded for pull request base (master@eeb3f4e). Click here to learn what that means.
The diff coverage is 12.32%.

@@            Coverage Diff            @@
##             master    #1726   +/-   ##
=========================================
  Coverage          ?   25.19%           
=========================================
  Files             ?       98           
  Lines             ?     5017           
  Branches          ?        0           
=========================================
  Hits              ?     1264           
  Misses            ?     3611           
  Partials          ?      142

Impacted Files	Coverage Δ
pkg/api/types.go	0% <ø> (ø)
pkg/api/cluster.go	0% <ø> (ø)
pki/x509.go	20.58% <ø> (ø)
credential/pki.go	0% <0%> (ø)
pki/keypair.go	0% <0%> (ø)
pkg/api/keypair_spec.go	0% <0%> (ø)
credential/generator.go	0% <0%> (ø)
pki/pki.go	0% <0%> (ø)
pkg/model/credentials.go	60.6% <50%> (ø)
credential/encrypted_assets.go	57.33% <80%> (ø)

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update eeb3f4e...e50d24c. Read the comment docs.

[dominicgunn]

A quick comment about commiting go.mod and go.sum whilst we still have /vendors

[dominicgunn]

Approved.

[dominicgunn]

/lgtm