I think it's worth explicitly mentioning that a `0` exit status will allow the CSR to be signed and a non-zero exit status will prevent a CSR from being signed.

It should also be mentioned if there are any precedence rules in place.  For example, if `autosign = true` and `autosign_command` returns `1`, is the certificate signed or not?