Configure HSTS on the webserver

If the hiera value is set for HSTS, we should be able to ship an apache configuration that enables it.

However, I recall elijah saying that this was more complicated, but I am not sure I recall why. Elijah perhaps you could write here why?

(from redmine: created on 2013-08-20, closed on 2013-08-22, relates #8585)