Robustify the nested Eagle shell handling for creating a new Harpy certificate.