Rename CertificateSignerV1 to LegacyCertificateSigner
Support blacklisting routes for authentication