In the above `if` statement, can we also do this work if the `cn` is different to the last time we ran this?  Maybe by cracking out the public key, or storing the `cn` in a file?

Otherwise changing your domain-name/identity breaks homestead in a hard-to-fix way.