provider to generate self-signed certs