Move certs specific part to puppet-certs module