Sub-command to mark a certificate as legitimate

[AGWA]

It would copy the certificate into the state directory, so you're not alerted when the certificate later shows up in a log.

This command could be invoked by a certbot deploy hook.