I need to store data between calls to Sign(), similar to how the Venafi issuer stores "pickup IDs" in the annotations of the certificate request. I cannot seem to figure out how to do this with CertificateRequestObject as I can't seem to get the actual typed object out of it. Could I get some guidance on the intention here?