cert_copy: add command line tool