Add the missing bits to get the fedmsg certs installed correctly

inventory/group_vars/elections

@@ -10,3 +10,13 @@ tcp_ports: [ 80 ]
 custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ]
 
 fas_client_groups: sysadmin-noc,sysadmin-web,fi-apprentice
+
+# These are consumed by a task in roles/fedmsg/base/main.yml
+fedmsg_certs:
+- service: shell
+  owner: root
+  group: sysadmin
+- service: fedora_elections
+  owner: root
+  group: apache
+