ensure facts.json is keyed by node name and not hostname
by default, skip local nodes on `leap facts update`
ensure that x509 certificates use dns names that are strictly sorted and unique, to prevent unncessary regeneration of certificates.