This allows passing a SSL cert and key to a load balancer to use SSL.
If a certificate is present, the expiry time and certificate subject are
available.
In many places we were checking for identity which was the shorthand for
checking if the resource had been saved by the service.
The #persisted? method was added to show a clearer intent and also offer
minimal ActiveModel interface