This will allow developers to create CertificateControllers with arbitrary Signers, instead of forcing the use of CFSSLSigner.