identitycertlib now uses identity injection

Add getConsumerCert to Identity to get the actual
consumer cert so identitycertlib can persist it
if need be.

move the actual ConsumerIdentity.read() to a
_get_consumer_identity() to make creatin mock
identities for injection easier.