SAN support is missing in [the keystore creation ](https://github.com/cloudera-labs/cloudera.cluster/blob/main/roles/security/tls_generate_csr/tasks/main.yml#L46)
