Refactor the pki, cert, kubeconfig code in the kubeadm binary into two separate and logically independent phases