WIP: Refactor certificate agent and queue

Details to follow...
Yes, it should. :-)