Detect runtime, rather than before starting/installing anything.

Including optional per-OS templates

(Solves https://github.com/saltstack-formulas/apache-formula/issues/153)

By reassigning options with `blockreplace` at `/etc/apache2/conf-available/security.conf`, which is linked as conf-enabled by default on Debian packages