Removes the primary IDP certificate, promoting the secondary to primary if present

This operation requires an authentication scheme, privilege, that the API's document does not define, so its parameters and responses are not shown here. They are in the OpenAPI document.