Looking at this guy from a test-ability perspective, if

- make product and entitle dirs inject'ed
- we split the self.uep.getCompliance call in _parse_server_status (_get_compliance etc)
- stub out _get_compliance in either that base class, or in a TestableCertSorter subclass

We could pretty much use the whole CertSorter class in tests instead of stubbing out
the entire class. Not sure if that is better or worse (most "real" code ran in tests, but
potentially slower tests, etc)