It would be useful for the charm's `certificate_extra_sans` config option to support an config like (unit referring to each kafka broker) ``` kafka-broker-{unit}.domain.com ```