Completely remove `jq` usage in `cert-auth`
Completely remove `jq` usage in `cert-auth`

Not strictly necessary, but seems nice.  Also has the benefit of
treating `req.$ca.json` as a by-product (rather than canonical input for
generating a host's cert).

benizi/dotfiles,benizi/dotfiles,benizi/dotfiles,benizi/dotfiles,benizi/dotfiles,benizi/dotfiles,benizi/dotfiles,benizi/dotfiles