Certificates: Add username flag

* Lets you run certificates for one particular user by accepting a -u
  command-line argument.

@jarv and @jbau please review.