import-dfn.pem.sh can now handle options to only generate relevant 
certs.