Dehydrated hook script needs force-upload function, support intermediate cert

[jaybonci]

We aren't properly handing out the intermediate cert, so we will need to do that. We don't want to rotate that, so we'll have to add a mode to the hook to do the upload anyways.