(#9508) Default ACL of auth any makes sense where we had auth no

In auth.conf, a setting of auth no means that only unauthenticated
requests are allowed. If you actually have a certificate you can't use the
service. (Yes, anonymous users have *more* access than authenticated ones.)

This alters the default to auth any instead, which allows you to access
these endpoints even where you already have a certificate.

This better supports the distributed model of certificate management anyhow,
now that we have things like the cloud provisioner trying to manage
certificates for other nodes over the network.

Signed-off-by: Daniel Pittman <daniel@puppetlabs.com>