For enroll, track the remote cert special
For enroll, track the remote cert special

For reconnect, we will have collective objects.  However at
enroll time, we need to be special.

xcat2/confluent,jjohnson42/confluent,whowutwut/confluent,jjohnson42/confluent,xcat2/confluent,whowutwut/confluent,whowutwut/confluent,xcat2/confluent,jjohnson42/confluent,jjohnson42/confluent,xcat2/confluent,whowutwut/confluent,jjohnson42/confluent,xcat2/confluent