Could cert_sorter use injected product_dir/ent_dir's by default? self.product_dir and self.entitlement_dir are the injected ones in this case. 

That also make's me wonder if self.cp/uep references should be injected.