I hate managing clients certs, but I doubt there’s a better way.