without autosign a new csr/key is generated in each puppet run

[trefzer]

Expected behaviour (which probably worked in earlier versions (eg. puppet < 7):
First puppet run:

• CSR is created
• CSR is uploaded
• wait_for_cert, fail

Second puppet run:

• wait_for_cert, fail

Instead, second puppet run creates a new CSR which fails uploading with the error message:
Error: Could not submit certificate request for '...' to https://...:8140/puppet-ca/v1 due to a conflict on the server.