WIP: Refactor certificate agent and queue

Details to follow...
Until we have proper docs, we seem to be dumping things into the README.md, where there is already a stanza that refers to the certificate_agent command-line flags; you may as well describe these flags there also.