Metacat

If the synch script (see previous task tracker) is written in Java (instead of bash+curl) then this will be easier to include as an upgrade utility class in Metacat. Or it will be pretty straight forward to refactor from bash to Java (d1_libclient_java).
See API docs here (already included in the Metacat Maven dependencies):
http://releases.dataone.org/online/d1_libclient_java/1.2.5/docs/apidocs/

Alternatively, we could include this admin interface so that it must be explicitly invoked by and admin user. Similar to SystemMetadata and ORE generation. This is probably the easiest and safest since it can be invoked at any point and repeatedly as needed. It also saves us from having to figure out if the MN is completely configured with its client certificate and correctly registered with the D1 CN.