hash was marked as unique: https://github.com/puppetlabs/puppetdb/pull/777/files#diff-11e61c2a3b3f71dacf7007d803e71b3dR651 but certname is not, I'll add it.