work with separate master/agent certs on master

This makes sure the agent's server is the same as the master's certname
and will sign the console/master/database cert in case an agent on those
boxes has a unique cert
ensure weve requested a cert....
fix per branans comments
fixup spec test
Merge pull request #27 from justinstoller/maint/master/breaking_my_world

work with separate master/agent certs on master