- Remove deprecated cert_subject option and signing preconfig
* The signing keypair is only required for PKI token format and
can be recreated if desired for an HTTPS deployment.