Implement the "pki new-csr" command

refs #7247