Move old test_certlib to test_entcertlib

Create new test/test_certlib that tests the stuff
that is in  certlib now.
remote _get_consumer_id from EntUpdateAction

Instead of providing a hook to override this, use an
injected identity for testing.