Mention --allow-dns-alt-names for monolithic console certs