remove-old-cas will generate new certs but leave the old ones in place

[katter]

rotato remove-old-cas will add yet another version of the cert (Same cert though) in credhub thus the old one will (that you wanted to replace) will still be in credhub and still be pushed out during a bosh deploy. This does not happen with all the car, but for instance it happens with silk.