Can we add a regression test for the #239 behaviour?

If we could hold off on doing a release until hashicorp/hc-passport-groups#1674 (hopefully) gets merged and I set up the same for hc-install, that would be great! That way we can kill two birds with one stone: both getting this release out, and verifying that managing the CRT approvers through Passport allows somebody other than Radek and Katy to do a release, as right now that group only includes the two of you.

I'm not sure how to test this with the current setup in the context of a library.

We could be testing any STDOUT/STDERR output but that falls mostly under #65 so I'll merge this PR without a test and we can follow up there. - that is once https://github.com/hashicorp/hc-passport-groups/pull/1674 is merged.