Standard procedure for setting up slaves in an HA environment is to generate all the slave certificates on the master machine, then copy and install keys, certs to slave machines. Even though theres a new step that copies the files to slaves, (e.g. --remote) a much more useful option would be to generate the SSL information on the slave, with the details from the master. That way you can setup wizard enviroments w/o CLI can automate adding slaves w/o have to log into the master machine (at least not until admin has to edit topology.xml file and such)