mention self-signed cert option