If a single config tx adds and removes 1 cert in consenter set,
it is considered to be cert rotation, therefore should be allowed
and supported.

Change-Id: Id2e78ae294cfb21501d1344e61ee1430088a0a68
Signed-off-by: Jay Guo <guojiannan1101@gmail.com>