Use more sensible defaults for container certificate.