Cert: make sure we unregister controllers during teardown

* Controller unregisteration should be in a "finally" block to make sure
  it runs even when there is an exception or test failure

Bug: 197893665
Test: gd/cert/run
Tag: #gd-refactor
Change-Id: Ia038b461f373f1d774f0fa9307a793e546ebe001