the openshift installer should exit if an expired cert is detected.
This would allow for the removal of the "lock" mechanism and simplify iterative deployment attempts.
Would also remove confusion of when to run "unlock". Error messaging is clear and mitigations identified.
installer begins
if openshift installation artifacts exist; then
do not re-run install
else
run install
endif
if install-cert expired; then
error message "Certificate has expired"
hint messages "Run deployer with 'clean' option and try again" step (not yet implemented)
exit
fi
proceed with install