Random first-run bug fixes
certificate signing