cert manager's Agent should return exit status