Determine alternative approach to executing certificate post-install

[hectcastro]

Currently, this is being done via handlers, which are prone to failures where:

• The handlers gets queued during an Ansible run
• Some failure short-circuits the Ansible run; queued handler is lost
• New Ansible run is triggered, but the task that queues the handler already successfully completed

This leads to too many scenarios where the handler does not get run.