As updater is used in environment, which requires it to have certificates available as fast as possible, add a prepare step and allow to launch it with --prepare-only switch.
Thanks to this it is possible to run it with configuration file to provide fallback or master certificates for all slaves without connecting to the network, thus resulting in fast preparation.