Actually, this is just the UpdateAction, which should be getting all of its parameters from the EntCertLib directly.  I think allowing them to be passed is fine because this is an encapsulated class, but testing is probably going to be much cleaner if we only allow injection or only passed values.