[Reviewer: Andy] Be specific about authentication applications versus accounting applications

Andy,

Please can you review this change to be specific about authentication applications versus accounting applications?  Basically, you now have to pick which application type you're registering, and this is indicated on the CER.  Previously, we specified both, which was wrong.

Live-tested.  UTs run but don't cover this.

Matt