root should be able to nrpe runcommand too
you need the public and private parts of the cert
enable the ssl securityprovider