[cert-sync]: Make the new store the default and add '--legacy' for the old one.