Remove primordial SCM dependency during SCM decommission

In current ozone, all new SCM will have its certificate signed only by primordial SCM, then primordial SCM should be always there in the whole Ozone cluster lifetime.

It means that primordial SCM cannot be decommissioned.

It imposes the restriction on the cluster maintenance and administration.

This task aims to remove this dependency on SCM decommission.