Add support for checking if public/private address has changed and re-request cert

[chuckbutler]

When a user suspends a public cloud image, its common that the public-ip will change. The layer-tls client should be intelligent enough to detect this event and re-request with an updated CSR to refresh the tls key/cert on the host machine with these updated details.

This will negate some need to re-key the infrastructure during normal operating events.