wip
split out the ent cert installer code

eventually make this into a good place to
hook "I just installed an ent cert" things,
like branding updates
first bits of branding model
start refactoring certlib, aiee