if you go the injection route, you can read these two values directly from Identity.  However, I'm not sure why we return anything here.  It is only used in one place as far as I can tell, managercli.RegisterCommand._persist_identity_cert wrapps it, so we can probably get rid of the wrapper,
and the return is used to print the uuid, which we should have in identity (managercli line ~1062)