pki: T5911: fix service update algorithm if certificate name contains a hyphen (-)

When testing for changed PKI certificates using node_changed(), we should not
use key_mangling=('-', '_'), as this will make certificate updates with a hypen
not possible.

(cherry picked from commit fc6926fdf32a7bdf9f943c7818ee6ea4a8131fba)