RSS: Collect and transfer x509 cert information into Nexus #1959
Description
There are a couple different parts top this:
- Add a way for RSS to take the x509 certs as input (handed off from wicket, someday).
- Transfer these x509 certs to Nexus as a part of either initializing nexus or the "RSS handoff" call: Store x.509 certs in CRDB, auto-load on boot, API for management #2099
- Store those x509 certs within cockroachdb (ideally, we'd store them within a storage layer like hashicorp vault eventually).: Store x.509 certs in CRDB, auto-load on boot, API for management #2099
- Use those x509 certs for launching future instances of Nexus: Store x.509 certs in CRDB, auto-load on boot, API for management #2099
- Remove x509 certs from packaging: Store x.509 certs in CRDB, auto-load on boot, API for management #2099
- When one Nexus server is updated, reach out to neighboring Nexus servers to update them too