More cleaning up of certificate store's handling of certs, surfacing the resource_id in certificate and adding a simple PDP implementation into auth_test.rb