Merge "`cert_client` minion `signing_policy` list for VNC CA cert is un-hardcoded" into release/proposed/2019.2.0