key-usage in batch mode: 'cert' more useful than auth.