pub fn canonical_agent_cn(machine_id: &str, suffix: &str) -> String
Build the canonical CN for an agent cert: agent-<machineId>.<suffix>.
agent-<machineId>.<suffix>