hopefully working rsync for certs
better post-rsync copy