fix leanpsk build with keep cert / session cert