Description of problem:

The logging role can use the firewall role and the selinux role to manage port access.
The logging role can use the certificate role to generate certificates.

New variables

- `logging_manage_firewall`: If set to `true` and ports are found in the logging role
  parameters, configure the firewall for the ports using the firewall role.
  If set to `false`, the `logging role` does not manage the firewall.
  Default to `false`.
  NOTE: `logging_manage_firewall` is limited to *adding* ports. 
  It cannot be used for *removing* ports.
  If you want to remove ports, you will need to use the firewall system
  role directly.
- `logging_manage_selinux`: If set to `true` and ports are found in the logging role
  parameters, configure the selinux for the ports using the selinux role.
  If set to `false`, the `logging role` does not manage the selinux.
  Default to `false`.
  NOTE: `logging_manage_selinux` is limited to *adding* policy.
  It cannot be used for *removing* policy.
  If you want to remove policy, you will need to use the selinux system
  role directly.
- `logging_certificates`: This is a `list` of `dict` in the same format as used
  by the `fedora.linux_system_roles.certificate` role.  Specify this variable if
  you want the certificate role to generate the certificates for the logging system
  configured by the logging role. With this example, `self-signed` certificate
  `logging_cert.crt` is generated in `/etc/pki/tls/certs`.
  Default to `[]`.
```yaml
    logging_certificates:
      - name: logging_cert
        dns: ['localhost', 'www.example.com']
        ca: self-sign
```